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Abstract 

We show that for any e > the problem of finding a factor (2 — e) approximation to the entangled 
value of a three-player XOR game is NP-hard. Equivalently, the problem of approximating the largest 
possible quantum violation of a tripartite Bell correlation inequality to within any multiplicative constant 
is NP-hard. These results are the first constant-factor hardness of approximation results for entangled 
games or quantum violations of Bell inequalities shown under the sole assumption that P=^NP They can 
be thought of as an extension of Hastad's optimal hardness of approximation results for MAX-E3-LIN2 
(JACM'01) to the entangled-player setting. 

The key technical component of our work is a soundness analysis of a point-vs-plane low-degree test 
against entangled players. This extends and simplifies the analysis of the multilinearity test by Ito and 
Vidick (FOCS'12). Our results demonstrate the possibility for efficient reductions between entangled- 
player games and our techniques may lead to further hardness of approximation results. 

1 Introduction 

In quantum mechanics, two or more spatially isolated systems are said to be entangled if no complete 
description of their joint state can be obtained solely from the combination of individual descriptions of 
each of the sub-systems. This intuitive definition is due to Schrodingerfl who first coined the term "en- 
tangled" in reaction to Einstein, Podolsky and Rosen's criticism of quantum mechanics as an incomplete 
theory IEPR35I . It is only through the work of Bell HBel64ll . thirty years later, that a mathematically sound 
and (at least in principle) experimentally verifiable theory for the quantification of the nonlocal effects of 
entanglement first arose. Bell proposed the use of what are now known as "Bell inequalities". Suppose 
that each subsystem can be locally observed using any one among a set of possible measurements Q, each 
producing outcomes in A. For any choice of settings {c\\, . . . ,q r ) G Q r the measurements' outcomes can be 
described by a joint distribution p(fli, . . . , a r \q\, . . . ,q r ). A Bell inequality is a linear inequality in the A'"Q r 
variables p(a, \q{) that is satisfied by any product distribution^ A state is entangled if and only if there exists 
a choice of local measurements on its subsystems that give rise to a collection of distributions violating a 
Bell inequality |Gis9H . 

The use of Bell inequalities has taken an increasingly central role in all aspects of quantum mechan- 
ics, from the study of its foundations to applications in quantum computing and cryptography. Somewhat 
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1 "When two systems, of which we know the states by their respective representatives, enter into temporary physical interaction 
due to known forces between them, and when after a time of mutual influence the systems separate again, then they can no longer 
be described in the same way as before, viz. by endowing each of them with a representative of its own. I would not call that one 
but rather the characteristic trait of quantum mechanics, the one that enforces its entire departure from classical lines of thought. 
By the interaction the two representatives have become entangled." (Sch35 1 

2 By linearity, the inequality will automatically be satisfied by any convex combination of product distributions as well. 
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ignored in the immediate aftermath of Bell's work, interest was revived after the discovery by Clauser et 
al. IICHSH691 of the first simple inequality that could realistically lead to an experiment (indeed, the ex- 
periment was successfully performed by Aspect [ADR82 1 some thirteen years later). Their inequality, the 
"CHSH inequality", applies to two systems on each of which two binary measurements can be made. It can 
be stated as follows: 
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Quantum mechanics predicts that there exists four measurements (two on the first subsystem and two on 
the second) which when applied to a system initialized in the joint state |Y) = (1/ v / 2)(|00) + 
result in a distribution for which the left-hand side of CO evaluates to 1/2 + \/2/4 « 0.85. Many Bell 
inequalities have since been introduced. More than 40_years of investigation, including the extensive use 
of numerical methods, have led to thousands of papers^ These investigations, however, have for the most 
part been confined to the study of small-scale examples, typically involving at most three subsystems and 
three or four measurement settings per system. This limitation reflects both the richness of entanglement 
and the difficulty of obtaining asymptotic results. It raises an obvious question: What is the computational 
complexity of Bell inequalities? 

Surprisingly, it is only relatively recently that the question was first precisely formulated by Cleve 
et. al HCHTW04II . who gave a re-interpretation of Bell inequalities in terms of multiplayer games. From 
their use in zero-knowledge proof systems [GMR85] to their role in the proof of the PCP theorem HAS98I 
ALM + 98l multiplayer games have played a central role in computational complexity and cryptography 



throughout the past quarter century. A multiplayer game is run by the "referee", a trusted classical party, 
who interacts with r > 2 "players". The referee chooses questions (q\, . . . ,q r ) G Q r according to a distri- 
bution 7T, and sends question qi to player i. The players each have to provide an answer a; to the referee. 
The referee accepts or rejects the answers he receives according to a criterion V{ai\q{) G {0, 1}. The rules 
of the game, including n and V, are public and known to the players, who cooperate in order to win the 
game. The only restriction on their strategies is that the players are not allowed to exchange any information 
once the game has started. 

In parallel to their use in complexity, multiplayer games have turned out to provide a surprisingly rich 
framework in which to pursue the study of entanglement initiated by Bell. The "no communication" condi- 
tion placed upon the players has traditionally been interpreted as the formal requirement that the distribution 
p(ai\qi) on answers that they generate should be a (convex combination of) product distributions. As demon- 
strated by Bell, however, entanglement does not allow for supraluminal communication (quantum mechanics 
does not violate relativity), but it does allow for the generation of distributions that cannot be expressed as 
the convex combination of product distributions. The violation of Bell inequalities by quantum mechanics 
implies the following: there exists games for which entangled-player strategies are strictly more powerful 
than classical (shared randomness) strategies. Denoting by co*(G) the entangled value of a game G (the 
maximum success probability of entangled-player strategies) and by co (G) its classical value (the maximum 
success probability of classical players, restricted to using shared randomness as their sole source of corre- 
lation), we now know of games for which co* (G) = 1 but co(G) can be arbitrarily small HAra02l |Raz981 . 

The question formulated above can thus be restated as follows: What is the complexity of computing 
co*(G)? An answer to this question for the case of the classical value co(G) is precisely the content of 
the PCP theorem: co{G) is NP-hard to approximate within a multiplicative constant, even for games with 
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two players and binary answers — in fact, it is even hard for so-called XORgames in which the referee's 
criterion V only depends on the parity of the two answers he receives HHasOll rl For the case of the entangled 
value, however, for a long time little was known. Indeed, nothing can be deduced directly from the classical 
case, as the sole fact that co(G) < cv*(G) < 1 does not obviously make the problem any easier or harder. 

Interestingly, a series of works have pointed to the entangled problem being easier than the classical one, 
at least for restricted classes of two-player games. Cleve et al., building on work of Tsirelson HTsi801 . gave 
a polynomial-time algorithm based on the use of semidefmite programming for the exact computation of 
oo* {G) for the case of XOR games HCHTW041 . Kempe et al. |KRT10| also used semidefmite programming 
to show the existence of an algorithm giving a factor 6 approximation to 1 — a?* (G) for the case of unique 
games. If one allows so-called no-signalling strategies, in which the distribution p(cij\qj) is only limited 
by the condition that the marginal distribution on each subset of players' answers be independent from 
questions to the other players, then there is again a polynomial-time algorithm, this time based on a linear 
programming formulation of the problem HPre071 . 

Could the computation, or at least approximation, of co*(G) be in BPP? In jKKM + 1 1 1 IIKM09H it was 
shown that exact computation is NP-hard, even for two-player games with answers of length 2 from each 
player. Recently the first strong hardness of approximation result was obtained: the problem of approxi- 
mating co*(G) to within inverse polylogarifhmic accuracy for games with three players is NP-hard under 
quasi -polynomial reductions HIV 121 . This result was obtained as a corollary of the complexity class in- 
clusion NEXP C MIP*, an entangled-prover analogue of the celebrated NEXP C MIP IBFL91I . (Here 
MIP* is the class of languages that have multiprover interactive proof systems with entangled provers.) 

The initial discovery of the power of multiple provers, characterized by the equation MIP = NEXP, 
quickly led to the first hardness of approximation results for problems such as clique and independent 
set jFGL + 96| . Obtaining tight hardness results for constraint satisfaction problems such as 3-SAT BHasOlll . 
however, required much further work and the development of techniques such as low-degree tests HAS981 
IRS 961 , composition of verifiers HAS981 , and the use of gadgets MBGS 981. Our main contribution is the 
extension of some of the most important of these techniques to the setting of entangled-player gamesJl We 
prove soundness of a variant of the low-degree test against entangled players, provide techniques enabling 
the composition of verifiers sound against entangled players, and analyze specific gadgets. Motivated by the 
goal of obtaining strong hardness of approximation results for the simplest possible classes of games, we 
show the following main result. 

Theorem 1. Let e > be an arbitrary constant. Given a 3-player XOR game G it is NP-hard to distinguish 
between co(G) > 1 — e and to*(G) < 1/2 + e. (Here the size of a game is measured as the number of 
possible triples of questions in the game.) 

As mentioned above, the inclusion NEXP C MIP* IUV12I1 can readily be scaled down to a result on 
the hardness of approximating co*(G). Theorem Q] improves on this in the following ways. First, in HIV 121 
hardness is only obtained for approximation factors (1 + 1/ poly(logn)). Amplifying this gap to a constant 
requires sequentially repeating the game a poly-logarithmic number of times and induces a corresponding 
blow-up in its size. Second, the scaling down from MIP* results in games which have questions and answers 
of length poly(logn) and hence size, as measured by the total number of questions and answers, that is 



4 Here the input G is always given by an explicit table of values for the distribution n and the predicate V. 

5 Classically multiplayer games and PCPs provide two views on the same object. In the presence of entanglement the equivalence 
is less clear, and we prefer to work with games. See however QKRR13I for a possible definition of "no-signalling PCP" which 
naturally leads to a notion of "entangled PCP" equivalent to the games studied here. 
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super-polynomial. The games for which NP-hardness is established in Theorem Q] have questions of length 
0(log n) and answers consist of a single bit each. 

In terms of Bell inequalities, our main theorem gives the optimal hardness of approximation for inequal- 
ities involving three or more systems; indeed no simpler form for such inequalities can be thought of than 
correlation inequalities, which are the equivalent of XOR games. Since such inequalities measure the bias 
j6*(G) = 2co* (G) — 1 of a given XOR game, we can state the following immediate corollary of our main 
theorem. 

Corollary 1.1. Given an explicit description of a tripartite Bell correlation inequality, it is NP-hard to give 
any constant factor multiplicative approximation to the largest possible value that is allowed by quantum 
mechanics. 

In addition to the above-mentioned results we also show that for any constant 5 > it is NP-hard to 
distinguish between co(G) = 1 and co*(G) < 5 for games with three players, constant (depending on 5) 
answer size, and such that furthermore the referee only asks questions to two out of the three players and 
the constraint he verifies is a projection constraint (the answer from one of the two players whom received 
questions completely determines a unique valid answer for the second). 

We note that all our results only apply to games with three or more players. For the case of XOR games 
the above-mentioned result of Cleve et al. HCHTW041 shows that unless P=NP no hardness result can be 
expected when there are only two players. Showing hardness of approximation of co*(G) for two-player 
non-XOR games (even games with answers of length O(logn)) remains a tantalizing open question (see 
"soundness of the low-degree test" below for additional discussion). 

Techniques and proof overview 

Our approach to proving hardness of approximation for entangled-player games is based on two main com- 
ponents. The first is a notion of equivalence (or, closeness) of entangled-player strategies that is appropriate 
to composition. In analyzing the soundness of a certain game, or test, our goal is to make a statement of the 
form "any generic strategy with success 1 — e in the test must be e' -equivalent to an ideal strategy", where 
the ideal strategy has precisely the type of structure that the test is trying to enforce (for instance, a strategy 
answering all questions according to a fixed low-degree polynomial). In the case of classical determinis- 
tic strategies it is natural to define strategies to be e' -equivalent when they provide the same answer to all 
but a fraction at most e' of questions. In the case of entangled — indeed, even randomized — strategies 
it is less obvious what the correct notion should be. In particular, it a priori seems impossible to consider 
single-player strategies by themselves, as e.g. the marginal distribution on answers that they induce could 
very well be perfectly uniform, for every possible question. In addition, the notion of equivalence chosen 
should be appropriate for composition: if one test (for instance, the low-degree test) calls another test as a 
sub-procedure (for instance, instead of checking directly a constraint (p(x\, . . . , *io), the referee transforms 
cp into a 3-SAT formula over 10 variables and calls a sub-test specially designed for the efficient verification 
of small 3-SAT formulas), then it should be possible to effortlessly combine a soundness analysis of each of 
the two tests in a soundness analysis of the global test. We give a notion of equivalence that satisfies these 
requirements, demonstrating "by the example" that it is well-suited to composition. 

The second component is a soundness analysis of the plane-vs-point low-degree test from HRS971 with 
entangled players. Establishing soundness of this test is crucial to obtaining an NP-hardness result for 
games of polynomial size, rather than quasi-polynomial as in IUV12L Our analysis follows the same outline 
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as m (RS97]@ but it requires substantial additional work. In particular, the key step of "consolidation" 
performed in almost all known soundness analyses of the low-degree test requires a deep overhaul, and its 
extension to entangled-player strategies is one of our main technical contributions. 

We briefly expand on each of these two components below, pointing to the aspects of our proof that most 
differ from previous work done in the classical setting. We note that both components borrow heavily from 
techniques introduced in HIV 121 . and our contribution consists in an important extension and simplification 
of these techniques. We also note that our results make use of a recent parallel repetition theorem for 
entangled games IKV11H . as well as (and independently from its use to obtain parallel repetition) of an 
"orfhonormalization lemma" that played an important role in the proof of the parallel repetition theorem. 

Equivalence of entangled-player strategies. Suppose given a certain game, or test, in which the players 
are required to answer questions q 6 Q with answers a G A. For convenience we focus on a two-player 
game in which we can assume that both players use the same strategy, defined by a symmetric bipartite state 
|Y) and measurements { A a ^\ a&J \ for every q G Q. Let J- C {f : Q — y A} be a set of functions having a 
certain desirable property (for instance, we could have Q = F m , A = F, and T the family of all low-degree 
polynomials). Suppose the test is designed to verify that both players have the following ideal form: there 
exists a fixed / G T such that, upon receiving question q, either player answers it with f(q). Note that if 
the players are allowed the use of entanglement (or even shared randomness) then it is not realistic to hope 
for the existence of a single f underlying their strategy. Indeed, the players could use shared randomness 
to select a random / G T before computing their answer f(cj); no test will distinguish this from an ideal 
deterministic strategy. We are thus led to the following natural broadening of what is allowed in terms of 
ideal strategy: there should exist a self-consistent measurement M = {M? }f e j- such that the players are 
equivalent to players whom first, measure their respective systems using M, obtaining an outcome /, and 
second, answer their question q with f(q). 

We define consistent and equivalent. The two notions are related. The measurement {M^} is said to be 
e-self-consistent if the following holds: 

VJ(Y|M / «)M / |Y) > 1-e. 

/ 

What this means is simply that, whenever the two players each measure their respective systems using 
{M? }, they get the same outcome except with probability e. This is a natural requirement; indeed we are 
trying to mimic the deterministic case in which both players apply the same fixed function. To define a 
notion of equivalence we follow the approach from HIV 121 and say that a generic strategy A) for the 
players is £-equivalent to the ideal strategy {M^} if the following holds: 

%qE E <Y|A»®M/|Y) < e. (2) 

Note that can be interpreted as requiring that both strategies, generic and ideal, are £-consistent. At least 
two arguments point to this notion of equivalence through consistency being the "right" notion. 

First, as should be obvious from the definition, a relation such as © can be directly linked to quantities 
that arise naturally in the analysis of a game or test. For instance, success in the plane-vs-point low-degree 

6 In contrast to IRS97I . which was mostly concerned with obtaining a test with sub-constant error, we only analyze the low-error 
regime. Nevertheless, the analysis given in [RS97 1 (as detailed and refined in [MR08 1) is well-suited to an extension to the case of 
entangled players. 
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test immediately implies consistency between the two families of measurements that define a generic en- 
tangled strategy for the players: a "points" measurement, designed to answer questions made of a single 
point, and a "planes" measurement, designed to answer questions about the restriction of the low-degree 
polynomial to a whole plane (we refer to Section |3]for more details). This makes the notion of equivalence 
denned through © particularly well-suited to the analysis of multiplayer games. 

Second, equivalence obtained through consistency composes well. Suppose given a game obtained from 
the composition of two tests. In the game each player is asked a pair of questions (cji, (72). The first test is 
meant to verify that for every pair of questions ((71,(72) the players answer according to f„ 1 G T C {f : 
Q2 — > A}. The second step checks that the function is obtained as g(cji) for some g G Q C {g : Q 1 — > 
J 7 }. The composed test is meant to verify that the players each answer ((71,(72) with (g(qi))((]2)- That this 
will hold is clear if the players are deterministic and both tests are sound against deterministic strategies. 
We show (indeed it is a simple calculation) that it is also the case when the players may apply entangled 
strategies, provided the soundness analysis of each subtest is based on the notion of equivalence denned 
by©. 

Soundness of the low-degree test with entangled players. Recall that in the plane-vs-point low-degree 
test the referee chooses a uniformly random affme plane p in F m , where F is a large finite field and m an 
integer, sends p to one player and a uniformly random x G p to the second, and expects as answers the 
description of a polynomial / of total degree at most d defined on p and a point a G F respectively such that 
f(x) = a. (See FigureQ]for a more detailed description of the test.) The goal of the soundness analysis is to 
show that any generic strategy for the players succeeding with probability at least 1 — e in the test, for some 
small fixed e > 0, is poly(e)-equivalent to an ideal strategy in which the set of functions T is the set T m ^ 
of m-variate polynomials over F with total degree at most d. The proof is by induction. First we show that 
for most lines £ C F m the players' strategy, when restricted to questions from £, must be poly(e)-equivalent 
to an ideal strategy using polynomials in T\ r &. Then we proceed to prove a similar statements for planes, 
cubes, etc., until the final statement is obtained for F m . This outline is common to most analyses of the 
low-degree test; details on the induction are given in Section [6] 

Here we concentrate on a key difficulty that arises when analyzing entangled-player strategies. In all 
known proofs by induction of the low-degree test the closeness parameter e blows up exponentially^ (The 
degree also increases, but we do not discuss this issue here.) In the classical, deterministic setting it is 
possible to argue directly using "robustness" properties of low-degree polynomials that ^-closeness for some 
sufficiently small 5 implies e'-closeness for some e' depending only on e (the failure probability in the test) 
but independent of 6 (the error parameter reached after a number of induction steps). In the entangled- 
player setting such a statement does not hold. Intuitively, the reason for this is that while a given low-degree 
polynomial cannot be corrupted at a substantial fraction of points without drastically increasing its degree, 
for any 5 it is possible to "corrupt" a measurement by any arbitrary amount 5, say by performing a small 
global rotation of the measurement operators. More precisely, © can fail for a number of reasons. While 
the measurement {M?} always outputs a low-degree polynomial, it does so probabilistically; hence the final 
probabilistic outcome f(q) can fully agree with the first players' answer (when she measures using {A^}) 
for most questions q, or partially agree for all q, or any combination in-between the two. 

As a result, the measurements constructed throughout the induction must be modified at each step by 
performing an active correction procedure. Such a procedure was already the most technically challenging 
step in the proof of IUV1211 . Here we build upon their work, but considerably improve and simplify their 

7 A notable exception is the proof technique from 1AS971 . which does not use induction but a more direct "bootstrapping" 
argument. 
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proof. The main idea is to define the "improved" measurement as the optimum of a particular semidefinite 
program — roughly, one that seeks to minimize (0 over all possible measurements {M^ }. Our analysis 
makes an important use of duality properties of that semidefinite program. As a result we are able to argue 
that, provided a reasonably good measurement exists (the one constructed by induction), then there must 
also exist a much better measurement, in the sense of having much higher consistency properties. However, 
the resulting measurement may not be defined on the whole Hilbert space (it is not hard to see that this is 
unavoidable). To overcome this we need to add a layer of recursion by performing the whole analysis again 
on the parts of the Hilbert space in which the previous step had resulted in un-recoverable failure. Further 
details on the consolidation procedure are given in Section [5] 

We note that of all our analysis it is only the consolidation procedure that requires the presence of 
three players (indeed, the low-degree test itself can be defined for two players only). If its correctness 
was extended to the case of two players one would automatically obtain a hardness result for two-player 
entangled games. We were unable to achieve this: the fact that the players' entangled state is a tripartite 
symmetric state seems essential for our proof technique to go through. 

Organization of the paper. We start with some useful preliminaries in Section |2] In Section [3] we intro- 
duce the main tests that we analyze: the low-degree test, its self-composition, a simple linearity test, and 
standard tests geared respectively at the verification of 3-SAT formulas and systems of quadratic equations. 
In Section @] we prove Theorem [Hand other hardness of approximation results for entangled-player games, 
assuming the soundness analysis of the low-degree tests. Section [5] contains the consolidation procedure 
required to carry out the induction in the proof of soundness of the low-degree test. The latter is given in 
Section [6] 

Acknowledgments. I am grateful to Dana Moshkovitz for helping me make my way through the classical 
literature on PCPs, including invaluable advice on the shortest path to obtaining constant-factor hardness of 
approximation results. 

2 Preliminaries 

2.1 Notation 

For an integer K, denote {1, . . .,K} by [K]. Given a finite set X and an integer n, we sometimes use bold 
font to denote tuples x = (x\, . . . , x n ) 6 X". We also write x<{ for (x\, . . . ,Xj) G X 1 , as well as x <( , 
x>i, etc. for the obvious tuples. When T is a finite set, we write E xG j for the expectation over a uniformly 
random element x of T. log denotes the logarithm taken in base 2. If B is a boolean variable, lg is 1 if B 
evaluates to true and otherwise. We also let — lg be 1 if B evaluates to true and 1 otherwise. 
It will often be convenient to express "approximate inequalities" as 

(E) «, (F), 

where here (£), (F) are two expressions that evaluate to complex numbers and 5 > a parameter. What 
this means is that there exists a universal constant C (the constant may be different every time the symbol 
is used) such that | (£) — (F)| <C5. 
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Polynomials and finite fields. F will always denote a finite field. F2 is the finite field with two elements. 
For an integer m we let z = (z\, . . . ,z m ) G F m denote a point, and y = (y\, . . . ,y m ) G F'" a vector (the 
distinction is only semantic; in particular we allow y = 0). Given z and y, we let (z;yj) denote the affine 
subspace of F"' containing all points of the form z + Ya Cityi, for a, G F. Given any such subspace we fix a 
canonical representation for it, and an associated coordinate system that makes it isomorphic to F d , where 
d is the dimension of the space spanned by the y ( . 

For an affine subspace s of F"' of dimension k and any < / < k we let Sj(s) be the set of all j- 
dimensional affine subspaces of s. When s is clear from context (e.g. s = F m ) we simply write Si for Sj(s). 
For any affine space s, V^(s) is the set of all degree-<i polynomials defined on s (in particular, ^(F'") is 
the set of all degree-d polynomials in m variables over F). Any such polynomial can be represented by the 
list of its at most {d + l) m coefficients over F. We recall the Schwartz-Zippel lemma [ Zip79|ISch8011 . which 
we will use repeatedly. 

Lemma 2.1 (Schwartz-Zippel). Let d,m > 1 be integers and p a non-zero polynomial in m variables of 
total degree at most d defined over the finite field F. Then p has at most d|F| m_1 zeros. 



States and measurements. We use calligraphic letters, such as 7i, to denote finite dimensional Hilbert 
spaces. For z G 7i, \\z\\ denotes its Euclidean norm. A state is a vector with unit norm. Given an integer 
r > 1 and a state |Y) G 1-L® r , we say that |Y) is permutation-invariant if c|Y) = |Y), where a is the linear 
operator corresponding to any permutation of the r copies of 7i (sometimes also called "registers"). 

Given a permutation-invariant state |Y), we will often abuse notation and use the symbol p for the 
reduced density of |Y) on any one of the registers (permutation-invariance implies that all single-system 
reduced densities are identical), but also on any two, three, etc. registers. In particular, we also write 
p = |Y) (Y|. It will always be clear from context which number of registers is meant. Given a density a, 
we write Tiv(A) as shorthand for Tr(Ac). Hence, for instance we have the following equivalent ways of 
writing the same expression: 

(Y|A<g>Id®---(g>Id|Y) = Tr p (A Id <g> • • • <g> Id) = Tr^IdOA) = Tr p (A). 

Let L (%) be the set of linear operators on TL, and || • || the operator norm on L (TL). Id = Id L (^j is 
the identity operator on 7i. A sub-measurement on is a finite set A — {Aj} of non-negative definite 
operators on 7i such that A, < Id. A measurement requires that Y4 A = Id. 

Let r > 2 and |Y) be a permutation-invariant state on 1-L® r , i.e. |Y) is invariant under any permutation 
of its r subsystems. To |Y) we associate a bilinear form on L (7i) x L (7i) by defining 

(A, £>)y := (Y|A®B®Id® (, '- 2) |Y) GC (3) 

for every A,B 6 L (%). The permutation-invariance of |Y) implies that this expression is independent 
of the exact registers on which the A and B operators are applied (provided they are distinct). We also 
introduce a norm on L ("H) by defining 

||A|hr := ((YlAA+^Id^'- 1 ) |Y)) 1/2 . 

We note that the order AA f matters, and one can define an inequivalent norm by Y ||A|| 2 := (Y|A + A ® 
Id®( r ~ 1 -' [Y). We then have the following Cauchy-Schwarz inequality 

|(A,B) Y | < min{ ||A|| y - y||-B||/ y||A|| • ||B||y} < min { ■ ||B||, ||B|| Y ■ ||A||}. (4) 
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The following inequality will also prove useful: for any A, X G L ("%), 

||AX|| Y < ||A|| T • ||X||. (5) 
Finally, we record the following claim for future use. 

Claim 2.2. Let |Y) be a permutation-invariant state on r > 3 registers, and {A a }, {£>"} two single-register 
measurements with outcomes in the same set A. Then 

E||A"-B B ||* < 0(VS), 

a 

where 

5:=l-£(A«,B%. 

a 

Proof. Expand 

E||A 8 -B fl ||* = £ (Tr p ((A fl ) 2 )+Tr,((B fl ) 2 )-2K(Tr p (A fl B fl ))) < 2 - 2 £ »(Tr p (A«B fl )). 

a a a 

It will suffice to lower bound the third term. We have 

J^Tr p (A a B a ) = £ Tr p (A"B a ® B h <g> A c ) 

a a,b,c 

^j- g J^Tr p (A a B a ®B a ®A a ) 

a 

«vjE Tr p( Id ® Bfl ®^ 8 ) 

(7 

= 1-^ 

where the two approximate equalities follow by using the Cauchy-Schwarz inequality and the definition of 
b twice each. □ 

Consistency parameters. The following definition will play an important role in the analysis. 

Definition 2.3. Let V be a set, for every v E V {A"} a sub-measurement with outcomes in F, and {MS} a 
sub-measurement with outcomes in {g : V — > IF}. Let M := M%. We will say that 

• M is 5-consistent with A ifE vG y YLg,a-.g(v)^a Ti> (M g <8> A") < 8, 

• M is ^-projective ifTv p (M <g> (Id -M)) < 7, 

• M is rj -complete ifTx p (M) >l — rj. 

2.2 Multiplayer games 

We study one-round games played by r > 2 cooperative players against a referee. 
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Definition 2.4. A game G = G(r, n, V) is given by finite sets Q of questions and A of answers, together 
with a distribution n : Gf —> [0, 1], and a function V : A 1 ' x Q r — > {0, 1}H The size of the game is defined 
as |G| = |Q||A|@ 

The game G is played as follows: The referee samples (c\\, . . . , q r ) from Q r according to TC, and sends 
question qi to player i. The players each reply with an answer a, G A. We say that the players win the 
game if V (a\, . . . ,a r \qi, . . . ,q r ) = 1 ; otherwise they lose. The value of a game is the maximum winning 
probability of the players. The players can agree on a strategy before the game starts, but are not permitted 
to communicate after receiving their questions. We distinguish two different values, depending on the types 
of strategies allowed for the players: the classical value co(G), corresponding to the maximum success 
probability of players using a classical deterministic strategy, and the entangled value co*(G), corresponding 
to the maximum success probability of quantum players allowed to use entanglement. 

Definition 2.5. Let G — G(r, tc, V) be a multi-player game. The classical value of G is defined as 

co(G) := sup n(qu---,qr)v(fi(qi) f ...,fr(qr)\q\,---,qr)- 

h fnQr+Afa qr )eQr 

The entangled value of G is defined as 

cv*{G) := sup £ Tc{q x ,...,q r ) £ V(m, . . .,a r \q x , . . . t q r )(^\A^ ® • • • ® A^JY), 

mK,} q r )£Q r {at a T )e[AY 

where the supremum is taken over all finite-dimensional r -partite states |Y) and measurements (POVM) 
{A a iq } a&A for every i G [r] and q G Q. 

We will most often work with verifiers who treat all the players symmetrically. The next lemma shows 
that in that case we can always assume that the optimal players' strategy has the same symmetry. 

Lemma 2.6. Let G = G{r, tc, V) be a game such that Tt{cj\, . . . , q r ) is symmetric in q\, . . . , q r and V is 
symmetric under simultaneous permutation of the questions (q\, . . . ,q r ) and of the answers (a\, . . . , a r ). 
Then given any strategy P\, . . . , P r with entangled state | Y) that succeeds with probability p in G, there 
exists a strategy P{, with entangled state |Y') and success probability p such that P[ = . . . = P' r and 
|Y') is invariant with respect to any permutation of its r registers. 

Proof. Let 6 r be the set of permutations of {1, . . . ,r} and assume, by appropriately padding with extra 
qubits, that all registers of | Y) have the same dimension. Define strategies P[, . . . , P'. as follows: the players 
share the entangled state |Y') = Y^ ae Q r |c(l)) • • • <8> (Y^), where the register containing |c(z')) is 

given to player i and jY 17 ) is obtained from |Y) by swapping the r registers according to a. For 1 < i < r 
player i measures the register containing |c(z')) and applies P a ^)- By symmetry of rc and V this new strategy 
achieves the same winning probability p, and |Y') has the required symmetry properties. □ 

3 Protocols 

In this section we introduce different games (or "tests") played between the referee and r players. All 
tests treat the r players symmetrically, and as a consequence of Lema 12.61 we may assume players use a 

8 We write V(-, •) as V (■ | ■ ) to clarify the role of the inputs. 

9 This measure does not explicitly take into account the description size of n, which we always assume to be at most polynomial 
in |G|. 
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(d, m, r, F) low-degree test 

1. Let d, m, F be parameters given as input. 

2. Choose a random x G F m and two random directions y\,y2 G F m . Automatically accept if the two 
vectors are not linearly independent. Otherwise, let s be the plane {x;y\,y-i). 

3. Select two players among r at random. Send s to the first, and x to the second. 

4. Receive a bivariate degree-d polynomial g defined on s from the first player, and a value a G F from 
the second. 

5. Accept if and only if g(x) — a. 



Figure 1 : The plane-vs-point low-degree test attempts to verify that the r players answer consistently with a 
degree-cf polynomial defined over F m . 

symmetric strategy; in particular their respective state can be represented using the same Hilbert space H 
for each player. In Section 13.11 we first introduce a variant of the low-degree test, a test that plays a key 
role in the construction of efficient PCPs. In S ections I3T21 and [3~4l we give standard tests respectively for the 
verification of the satisfiability of a 3-SAT formula and a system of quadratic equations in boolean variables. 
The latter uses a linearity test for functions FJJ — > F2 given in Section 13.31 We note that none of the tests 
we define is new and all have appeared previously in the PCP literature. 

3.1 The low-degree test 
3.1.1 A first protocol 

The line-vs-point low-degree test was introduced in HRS961 . Here we analyze a variant from HRS97II . The 
test is called the "plane-vs-point" low-degree test because it calls for two players to send back the restriction 
of a low-degree polynomial to a plane and a point chosen randomly in that plane respectively. The test is 
described in Figure Q] We summarize its main properties. 

Complexity. The longest question is the description of the affine plane s, which requires 3m log |F| bits. 
The longest answer is the degree-rf bivariate polynomial g, which can be specified using at most (d + 
l) 2 log |F| bits. 

Strategies. A strategy for the players in the (d, m, r, F) low-degree test is a triple ( |Y), A, C) where 

• I Y) is a permutation-invariant state on 1-L® r , 

• A = {A a x } is a set of "points" measurements {A^} flG F defined for eveiy x G F m , 

• C = {Cf } is a set of "planes" measurements {Cf }g<=p d ( s ) defined for every s G c>2(F m ). 
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Analysis. We state the soundness of the test as a theorem. The proof is given in Section [6l Note that 
although the test is defined for any r > 2, the theorem requires r > 3. 

Theorem 3.1. Let < e < 1/2, d > l,m > 2,r > 3 integers, and F a finite field of size |F| = ^ smc/j 
^ > (dm/ e) l , where d\ > 1 « a universal constant. Let A, C) &e a strategy with success 1 — e in 
the (d,m,r ,W)-low-degree test. Then there exists a measurement {M#} with outcomes g G T > ^(W m ) such 
that 

E*gf» E E (^ m ^)y < C i £Cl - (6) 

g£7' i (F»)«eF:g(*)^fl 

where C\ < 1, Ci > are universal constants. 

Eq. © serves as a measure of distance between the provers' original strategy, defined by the measure- 
ments A x , and the new strategy defined by the single measurement M. The equation states that the two 
measurements are consistent in the sense that, if two players are simultaneously sent the same question x, 
and the first determines his answer by applying the measurement {A a x } while the second first measures us- 
ing {M s } and then returns g(x), then the players will provide identical answers except with probability at 
most Ci£ Cl . Hence provers succeeding in the low-degree test are in a sense "equivalent" to provers applying 
the measurement M to determine a low-degree polynomial g even before having looked at their question. 
We also note that using Claim l2T2l Eq. (© is easily seen to imply the distance bound 

E,6F»E A%- E MS 2 = 0(^ /2 ). 
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3.1.2 A test with reduced answer size 



Y 



When the low-degree test is used the degree d will typically be poly-logarithmic in the input size, so that 
the answer length of the test described in Section 13.1.1 l is poly-logarithmic as well. In this section we show 
how the previous test can be composed with itself to obtain a test with reduced answer length. The idea of 
composition was instrumental in the proof of the PCP theorem MAS98II . 

Let m, d, q be integers and F a field of size |F| = q. We first describe how variable substitution (see 
e.g. ||DFK + 1 1 1 Section 4.4]) can be used to map a degree-d polynomial g over F 2 to a degree-rf' polynomial 
g' over F m , where m! = d' := 2[log(rf + 1)] . For i = 0, . . . , [log(d + 1)] — 1 introduce new variables 
Xj := x 2 ',y, := y 1 ' . Using the base-2 decomposition of k and I, any monomial x k y e can be written as a 
product of the x, and y,, each appearing at most once. Let g' G F[x,,y,] be such that g' — > g (formally) 

when Xj — > x b ' — > y b ' . Let 

->• F m ' 

(x,x 2 ,...,x d ,y,y 2 ...,y d ), 

and note that for any x G F 2 , g(x) = g'(#x). 

For any number r > 2 of players, the [d, m, r, F) two-level low-degree test is described in Figure |2] We 
summarize its main properties. 

Complexity. The longest question is the pair (s, s'), which is 3m log |F| + 3m' log |F| < 6m log |F| 
bits. The longest answer is the polynomial g', which can be specified using at most (d') 2 log|F| = 
0((logd) 2 log|F|) bits. 




12 



(d, m, r, F) two-level low-degree test 

1. Let d, m, F be parameters given as input. Set d! = m' := 2 [log(d + 1)] . 

2. The referee chooses a random x G F"' and two random directions 371,3/2 G F m . He automatically 
accepts if 3/1,1/2 are not linearly independent. Let s := 3/1,1/2) be the corresponding affme plane. 

3. The referee chooses a random x' G F w and two random directions G F m '. He automatically 
accepts if 3/1,3/2 ^ not linearly independent. Let s' := (x'; 3/1,3/2) De the corresponding affine plane. 

4. The referee selects two players at random, and performs one of the following two tests, with proba- 
bility 1/2 each. 

4. 1 The referee sends x to the first player and and (s, #x) to the second. He receives answers a G F 
and a 1 G F respectively, and rejects if a 7^ a' . 

4.2 The referee sends the pair (s, s') to the first player and (s, x') to the second. The first player 
answers with a degree-cf bivariate polynomial g' over s' and the second with a value a' G F. 
The referee rejects if g'(x') ^ a'. 

5. If the referee has not rejected then he accepts. 



Figure 2: The (d, m, r, F) two-level low-degree test attempts to verify that the r players answer consistently 
with a degree-d polynomial defined over F m . Note that queries to the second player in steps 4.1 and 4.2 are 
identically distributed, so that the players cannot distinguish which test is being performed. 
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Strategies. The players have the following measurements. For every x G F m , a "points" measurement 
{A£} flG F. For every plane s G 52 (F m ) and every x' G s (where is represented as #x for some x G s), 
another points measurement {B a sx } a ^. For every plane s G 52(F" ! ) and every plane s' G 52 (F m ), a 
"planes" measurement {Cg ? s ,}. where g is a degree-cf bivariate polynomial defined on s'. 

Analysis. We state the soundness of the test as a theorem. The proof is given in Section l6\6l 

Theorem 3.2. Let < £ < 1/2, d > l,m > 2, r > 3 integers, and F a finite field of size |F| = q 
such that q > (dm/eY 2 , where d^ > 1 z's a universal constant. Let ([*¥), A, B, C) &e a« r-player strategy 
with success 1 — ein the (d, m,r,W) two-level low-degree test. Then there exists a measurement {M s } with 
outcomes g G Vdd'i^ m ) such that 

£ X] K>^) Y < C 2 £ C2 , 

£G7V(F>")«GF:£(*)^J 

where Ci < 1, C2 > are universal constants. 



3.2 The 3-SAT test 

Let <p be a 3-SAT formula with n variables and poly(n) clauses. Let h = [log n \ and m = [log n/ log log n\ , 
so that (/z + l) m > n. Let F be a field of size |F| = q > h + 1, and identify [n] with the subset 
{0, . . . , h} m C F m . Let <i := mft. In the test, the players are supposed to hold a degree-d polynomial g over 
F m obtained as the low-degree extension of a satisfying assignment to the variables of cp: g is the unique 
m-variate polynomial of degree at most h in each variable such that g(x) = x for every x G {0, . . . ,h} m 
associated to the variable x (see e.g. BBFLS911 Proposition 4.1] for a proof of existence and unicity). 

A degree-4 curve c in F" 1 is specified by m univariate polynomials of degree at most 4 over F, (c\, . . . ,c m ). 
The restriction of g to c is a univariate polynomial g\ c (t) = g(c\ (t), . . . , c m (t) ) of degree at most 4d. Using 
variable substitution as in Section 13.1.21 g\ c can also be thought of as a polynomial of degree d' in F m ', 
where d' = m' = [log(4d + 1)]. Let # : F ->■ F" be the map which performs the variable substitution. 
The (cp,n,r,F) 3-SAT test is described in Figure [3] We note that the use of curves to aggregate the values 
of a polynomial at different points is standard in the PCP litterature; see e.g. HMRlOi 



Complexity. The maximum question length is 0(mlog |F|): it is 0(mlog |F|) in the two-level low- 
degree test, and in step 2.2 the longest question is the curve c which takes at most m ■ 4 log |F| bits to 
specify. The two-level low-degree test has answer length O ( (log d) 3 log | F | ) . The polynomial g G [c! ) 
in step |2(b)il requires 4<i' log |F| bits. Overall, the answer length is 0( (log log n) 3 log |F|). 



Strategies. The players have a state |Y), measurements (A,B,C) corresponding to a strategy in the 
(d, m, r,F) two-level low-degree test, for every degree-4 curve c in F m and w G c (specified as a point 
in F m ) a measurement {D a c w } a £¥, and finally for every degree-4 curve c' in F'" , a "curve" measurement 
{Fy, where gZV u >W). 

Analysis. It is clear that if cp is satisfiable then the players have a perfect strategy that does not use any 
entanglement. They can simply define a polynomial g as the degree-rf extension of a satisfying assignment 
to cp, and answer the two-level low-degree test according to g. If a player is asked a queiy of the form 
(c, #zv ) he answers with g(io). If he is asked for (c, c') he answers with the restriction of g to the curve c', 
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(f,n,r,F) 3-SATtest 

1. Let h = [logn], m = \logn/ log log ri\ , d = mh, and d' = m' — [log(4d + 1)] . 

2. Do each of the following with probability 1/2 each: 

2. 1 Perform the {d, m, r, F) two-level low-degree test. 

2.2 Pick a clause C G (p at random. Let x, y, z G [n] be the three variables in cp, and x, y, z the 
associated points in F m . Let if be a random point in F m and c the degree-4 curve through 
(x, y,z,w). Do each of the following with probability 1/2 each: 

2.2.1 Select two players at random. Send w to the first, receiving a G F as answer, and (c,#w) 
to the second, receiving a' G F as answer. Reject if a ^ a'. 

2.2.2 Pick a random w' G F m , and select two players at random. Send (c,w') to the first, 
receiving a G F, and (c, c') to the second, where d C F m is the degree-4 curve going 
through (#x,#y,#z, w'), receiving^ G V^'ic') as answer. Reject if {g{#x), g(#y), g(#z)) 
is not a satisfying assignment to the variables in clause C, or if g(iv') ^ a. 



Figure 3: The (cp, n, r, F) 3-SAT test attempts to verify that the r players answer consistently with a degree-ii 
polynomial over F m that is the low-degree extension of a satisfying assignment for q> (encoded in the values 
of^on {0,1,..., h} m ). 

seen as a univariate polynomial of degree at most 4d' defined on d C c ~ F m . We state the soundness of 
the test as the following theorem. The theorem is proved in Section[7j] 

Theorem 3.3. Let < e < K3, where K3 > is a universal constant, cp a 3-SAT formula on n > 3 
variables, r > 3 and F afield of size |F| = q such that q > (logn/e)^ 3 , where d$ is a universal constant. 
Let ( I Y), A, B, C, D, F) be an r-player strategy with success 1 — e in the (cp, n, r, F) SAT test. Then there 
is an assignment to the variables in cp that satisfies all but a fraction at most C^£° 3 of the clauses, where 
C3 > 0, < C3 < 1 are universal constants. 

3.3 The linearity test 

Let n be an integer and F2 the field with two elements. The (n,r) linearity test uses r > 3 players and is 
described in Figure @] 

Complexity. Questions have length n and answers are a single bit. 

Strategies. A strategy for the players in the (n, r) linearity test is given by a state |Y) and a family of 
measurements {A a x } with outcomes a G F2. 

Analysis. The linearity test was first introduced in HBLR931 in the classical setting. The analysis with 
entangled players is joint work of the author and Tsuyoshi Ito HVidllll . 
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(n, r) linearity test 

1. The referee chooses i,y 6 uniformly at random. He selects three players at random and sends 
them x, y, x + y respectively. 

2. The players answer with a, b, c G F2 respectively. The referee accepts if and only if c = a + b. 



Figure 4: The linearity test attempts to verify that the r players answer consistently with a linear function 
/ : F£ -> F 2 . 

Theorem 3.4. Let n be an integer, r > 3, e > and ( | Y), A) a strategy for the players in the (n, r) linearity 
test. There exists a measurement {M"} with outcomes u G FJJ such that 

E* eF » E (M u ,Al) Y = 0{V~e). 

3.4 The QUADEQ test 

Let QUADEQ be the language consisting of all systems of quadratic equations over F2 that are satisfiable. 
An instance of QUADEQ over n variables X\ is thus a set of K = poly(n) quadratic equations of the form 

£ afxiXj = c« (mod 2), 
w'e[n] 

for k = 1, . . . , K, that are simultaneously satisfiable. QUADEQ is well-known to be NP-complete. Here we 
recall a standard test for verifying membership in QUADEQ (see e.g. MAB09I Theorem 11.19]). Let cp be 
an instance of QUADEQ on n variables and r > 3. Looking ahead, we assume that the variables of q> are 
partitioned into two chunks of n' = n/2 variables each, labeled l\ and £2 (the labels will be used to identify 
the chunks among a larger universe of variables). The (cp, n, r) QUADEQ test is described in Figure [5] 

Complexity. The maximal question length is n 1 plus the length of the labels. The answer length is one 
bit. 

Strategies. The players have a state |Y), for each label l{ measurements A\ = Ag. corresponding to a 
strategy in the (n/2,r) linearity test, and for each pair of labels (t\,ii) measurements B = and 
C = Qj^ 2 corresponding to strategies in the (n,r) and (n 2 ,r) linearity tests respectively. 

Analysis. Suppose cp is satisfiable, and let x = {x\,X2), where X[ G F^ 2 contains the assignment to 
variables from chunk l\, be a satisfying assignment. Then the players have a perfect strategy that does 
not use any entanglement. For this, they answer a query of the form (£i,u) with u ■ Xf, a query of the 
form [l\,l%,v), where v G F^, with v ■ {x\,X2)\ a query of the form {t\,ti,w), where w G FJJ , with 
w ■ ((x\, X2) (8> (x\, X2)). We state the soundness of the test as the following lemma. The lemma is proved 
in Section 17721 
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O ,n,r) QUADEQ test 
1. The referee performs each of the following with probability 1/4 each: 

1.1 With probability 1/4 each, do the following: 

1.1.1 Send label l\ to three players chosen at random and perform the (n/2,r) linearity test. 

1.1.2 Same with label £2. 

1.1.3 Send labels £2) to three players chosen at random and perform the (n, r) linearity test. 

1.1.4 Same but perform the (n 2 , r) linearity test. 

1.2 Select random u,v G F^ 2 and send (£i,u), (£2,®), {£\,£i, (u,v)) to three players chosen at 
random. Receive a, b, c respectively and reject if a + b 7^ c. 

1.3 Select two random vectors «,d6F 2 ". Send (£\, £2, u), (£%, £2, v), [£\, £2, u®v)to three players 
chosen at random. Verify that their answers [a, b, c) satisfy a ■ b = c. 

1.4 Select a random vector v G Ff and let w = YLk u>k a ^ S F 2 . Send (£\,£2, w) to a randomly 
chosen player, and check that the answer a = w^c^K 



Figure 5: The QUADEQ test attempts to verify that the r players answer consistently with functions fe 1 ,fe 2 ■ 

F£ /2 F 2 and / : F2[ -> F 2 , g : F2? 2 F 2 such that /(xi, x 2 ) = (xi ) + (x 2 ) and g = / <g> /. 

Lemma 3.5. Le? < e < K4, where K4 > is a universal constant, cp a QUADEQ instance on n > 2 
variables and r > 3. Le? (|Y), A, B, C) be an r-player strategy with success 1 — tin the (cp, n, r) QUADEQ 
test. Then cp is satisfiable. Moreover, suppose given a collection of QUADEQ instances cp\, . . . , cpj, each 
acting on a pair of chunks of variables chosen from a common universe {x\, . . . ,x$}, where Xj G F^ 2 . Let 
( |Y), (A)/ (£>!,/')' (Q,;)) ^ e suc h that for every t G {1, . . . ,T} the strategy ( |Y), Aj, Bij, Q where cpt is 
over chunks X[ and Xj, has success 1 — e in the (cpt,n,r) QUADEQ test. Then there exists measurements 
{M* ! } ze]F "/2, far every i G {1, . . . ,S}, such that for every cp t on (xj, Xj) it holds that 

£ (M^mJOy > 1-C 4 e c \ 

{Xi,Xj)\-<p t 

where (xi,X;) h cpt means that the assignment (xi,Xj) satisfies cpt and < C4 < 1, C4 > are universal 
constants. 

Note that the "furthermore" part of the lemma does not claim that the system {<Pf}f=i,.../r is simultane- 
ously satisfiable. 

4 Hardness results 

In this section we prove our main theorem, Theorem [TJ which is restated as Corollary !4.4l below. In Sec- 
tion [4j] we state a first hardness result that follows almost directly from the 3-SAT test from Section I3T21 
whose analysis depends on the (composed) low-degree test from Section 13.1.21 In Section 14.21 we use 
the QUADEQ test from Section 13.41 to obtain a hardness result for games with constant answer size. In 
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Section 14.31 we apply the parallel repetition theorem from HKVlll to amplify the resulting hardness of ap- 
proximation factor. Finally, our main theorem is proven in Section l4~4l 



4.1 The basic hardness result 

Our first hardness result is the following. 

Theorem 4.1. There is an e > such that the following holds. Given a 3-player game G in explicit form, 
it is NP-hard to distinguish between co(G) = 1 and co*(G) < 1 — £. Furthermore, the problem is still 
NP-hard when restricting to games G of size n such that the following hold: 

• Questions have length O(logn) and answers length poly (log log n), 

• The referee treats all players symmetrically and only sends questions to two out of the three players, 



The referee's test is a projection test: among the two players who receive a question, there is one 
whose answer determines a unique correct answer for the other. 



Proof. The proof of the theorem follows from the analysis of the 3-S AT test given in Theorem 13.31 First 
recall that the PCP theorem shows that there exists an £\ > such that it is NP-hard to distinguish between a 
3-S AT formula being satisfiable or the formula having at most a fraction 1 — £\ of its clauses simultaneously 
satisfied (see e.g. llALM+98l IBGLR931 iHasOll ). Let n be an integer, £ 2 = min(K 3 , (ei/C 3 ) 1/C3 ) and F a 



finite field of size q G [(logn/ei) d3 ,2(logn/ei) d3 ]. Given a 3-SAT formula cp, let Gy be the 3-player game 
corresponding to the (cp, n, 3, F) 3-SAT test. With our choice of q the question length in is 0(log n) and 
the answer length 0( (log log n) 4 ); in particular the size of G v is polynomial in n. Furthermore it is clear 
that an explicit description of Gq can be computed in polynomial time from cp. 

If cp is satisfiable then co(Gcp) = 1. Furthermore, Theorem 13. 3 1 implies that if a>*(G<p) > 1 — £2 then 
(by definition of £2) there is an assignment satisfying more than a fraction 1 — £\ of the clauses of cp. Hence 
deciding between co(Gip) = 1 and co*(Gcp) < 1 — £2 is at least as hard as deciding between cp being 
satisfiable and cp having at most a fraction 1 — e\ of its clauses satisfiable. □ 



4.2 Hardness for games with constant answer size 

In this section we combine Theorem 14. II with the QUADEQ test from Section l3~4l to obtain a hardness result 
for games with binary answers. 

Corollary 4.2. There is an e > such that the following holds. Given a 3-player game G in explicit form 
in which answers from the players are restricted to a single bit each, it is NP-hard to distinguish between 
co(G) = 1 andw*(G) < 1 - £. 

Proof. Let cp be a 3-SAT formula on n variables, and G\ = G v and e-[ > the 3-player game whose 
existence follows from Theorem 14. II if cp is satisfiable then o;(Gi) = 1 whether if cp is not satisfiable then 
cv*(G\) < 1 — £\. We show the existence of a 3-player game G2 with binary answers and an £2 > such 
that if cp is satisfiable then o;(G2) = 1 whether if cp is not satisfiable then o;*(G2) < 1 — £2- Furthermore, 
G2 can be computed in polynomial time from G\. 

Let Q be the set of all questions that can be asked in the game G\, and n the distribution on Q x Q 
with which pairs of questions are chosen (recall that even though the game involves three players, only two 
questions are asked simultaneously). Let m = poly(loglogn) be the maximal length of an answer in G\, 
and write A = {0, 1}"' for the set of all possible answers. For every (^1,^2) £ Q x Q the referee in G\ 
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expects a pair of answers (fli,^) G A x A. He then verifies a certain condition V{a\, a.i\c\\, qi) G {0,1}. 
Using NP-completeness of QUADEQ, this condition can be expressed as an instance tpq lr q 2 of QUADEQ 
over 2m + w! variables. Here the first 2m variables correspond to the bits of a\ and CLi. The additional m! 
variables are auxiliary variables used in the reduction transforming V(-, ■ \c\\, q^) in an instance of QUADEQ. 
Technically the QUADEQ test should be modified to take into account these auxiliary variables. However, 
the way to do this is quite standard (see e.g. HAB09I Corollary 22.13] for details) and for simplicity in this 
outline we ignore the role played by the auxiliary variables and assume m! = 0. The 2m variables can 
then be split into two chunks of variables, such that the first chunk is associated to a\ and the second to 
Hence we may think of each QUADEQ instance tyq Xl q 2 obtained from (^1,^2) G Q x Q as acting on two 
chunks of variables taken from a universe of chunks of m binary variables, each labelled using a unique 
label £{c() associated to a single question 1} 6 Q. From a classical deterministic strategy in G\ one can 
construct an assignment to the variables in all chunks satisfying a fraction of instances ipq lr q 2 equal to the 
success probability of the strategy in G\. 
Consider the following game G2: 

1. The verifier samples questions (^1,^2) as in G\. 

2. The verifier runs the i$q x ,q v m,3) QUADEQ test, where the labels are l\ = £(q\) and £2 = £{qi)- 

3. The verifier accepts if and only if the QUADEQ test accepts. 

First we note that the length of questions in G2 is at most twice that of G\ (for the labels) plus the square 
of the answer lengths in G\, so it is O(logn). The answer length is a single bit. Hence the size of G2 is 
polynomial in the size of G\. 

The discussion above shows that if co{G\) = 1 then 00 (Gi) = 1 as well; in fact it more generally 
holds that to{G2) > to{G\). Conversely, suppose that o;*(G2) > 1 — £2 where £2 > is to be specified 
later. Using Markov's inequality, for a fraction at least 1 — yf^. of pairs (c\\,c\'i) (chosen according to n) 
the players have success at least 1 — yjs^ in the (^pq 1/ q 2 , m, 3) QUADEQ test. Provided £2 is small enough, 
the "furthermore" part of Lemma 13.5 I shows the existence of a family of measurements {M^} fl£ A such that 
for each of the "good" pairs {c\\,(\j) it holds that 

£ (M" q \,M a q\h = l-0(£ c / /2 ). 

(«i,«2):V(«i,«2l9i,9a)=l 

It is then immediate that the strategy (|Y), {M^}) is a strategy for the players in game G\ with success 

probability at least 1 — Offi^ 2 ), which can be made larger than 1 — £1 provided £2 is chosen small enough. 

□ 

4.3 Amplifying the gap 

The constant £ for which we established NP-hardness in Corollary 14.2 1 can be very small. In this section 
we show that the entangled-player parallel repetition theorem from HKVlll can be applied to obtain the 
following. 

Corollary 4.3. Let 5 > be an arbitrary constant. Then the following is NP-hard. Given a 3-player game 
G in explicit form, distinguish between co(G) = 1 and co*(G) < 5. Furthermore, the problem is still 
NP-hard when restricting to games G of size n such that the following hold: 
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• Questions in G have length O(logn) and answers have length poly(<5 _1 ), 

• The referee treats all players symmetrically and only sends questions to two out of the three players. 

Proof. Let cp be a 3-SAT formula on n variables, and G\ = Gq, and e > the 3-player binary game whose 
existence follows from Corollary 14.21 if <p is satisfiable then co{G\) = 1 whether if q> is not satisfiable then 
U)*{G\) < 1 — £. We show the existence of a 3-player game G2 having the properties described in the 
theorem and such that if cp is satisfiable then co{G2) = 1 whether if <p is not satisfiable then co*(G2) < 
8. Furthermore, an explicit description of G2 can be computed from G\ in time polynomial in \G\\ and 
exponential in e~ l ,5~ l . 

First consider the following 3-player game G[ : 

• The referee samples a triple of questions {q, q' , q") as in G\. 

• He chooses two players at random, sends (q, q' , q") to the first and one of q, q' , q", chosen at random 
among the three possibilities, to the second. 

• The referee receives answers (a, a' , a") from the first player and b from the second. He accepts if and 
only if (a, a', a") would have been accepted as answers to (q,q',q") in G1, and b equals the answer 
from the first player matching the question sent to the second player. 

It is clear that co{G\) = 1 co(G[) = 1. Suppose co(G[) > 1 — s! , where e' > is a small constant 

to be specified later. Let ( |Y), A ? ^ ^1, B q ) be a strategy for the players with success 1 — e' in G[. We argue 
that, provided e' is chosen small enough, (lY),!^) has success at least 1 — e in G\. For every question q 
and answer a let 

A a q := E (l?v? „) £ A a q 

a',a":V(a,a',a"\q,q',q")=l 

where the expectation is taken according to the marginal distribution on questions (q',q") when q is fixed 
(note that the position in which q is placed does not matter as the distribution n on questions in G\ is 
symmetric). The test performed by the referee in game G[ enforces that {A q } is a sub-measurement such 
that botr0 

E q £(A a q ,Idh>l-e? and £ (A°, B a q )^ > 1 - e'. (7) 

a a 

In particular, applying Claim I2T21 we have that 



-q,q',q"' 



10 



We refer to Section|2]for an introduction to the notation used here. 
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As a consequence, we can write the following 

w*(Gi) > E (M , y0 £ Tr p( B ? ® B ? ® B ?) 

(«,«',«") 

F(« / fl',«"|ij 7 ?',(7")=l 

E (?Yr) E E Tf p ( <v ® < ® B ?) 

(a,a',a") (a,b',b") 
V(a,a',a"\q,q',q")=l V(a,b',b"\q,q',q")=l 

(«,aV) 
V(a / «',«"|^',9")=1 

~e' 2^ \ A q,q',q"' q'/Y 

(a,a',a") 
V{a,a',a"\q,q',q")=l 

>1-^ 

where the second line uses ([8]), the third and fourth use © together with the Cauchy-Schwarz inequality and 
the last is by definition of e' and G[. Hence oo*(G\) > 1 — 0((e / ) 1/ ' 4 ) > 1 — £ provided e' is chosen small 
enough. 

To conclude the proof of the corollary we define the game G2 as a special type of parallel repetition of 
the game G[. Let K, K' be parameters to be chosen later. 

• The referee picks K pairs of questions (q^, tfj) i=\,...,K according to the same distribution as in G[. In 

addition, he picks K' pairs (r^, 7^) /=l,...,iC' where each is chosen independently according to the 

marginal distribution on the first player and r 2 independently according to the marginal on the second 
player, 

• He picks two players at random and sends a random permutation of the questions (^ 1 )y=i,...,ic and 
(r^)y = i,...,ic to the first and (^>)y=i,...,K an d {r 2 )j=i,...,K' to me second. 

• Upon receiving answers (^)/=i,.. v k+k' an d ( a z)i=l,-.,K+K' respectively he accepts if and only if for 
every j among the indices of the "q" questions (he undoes his random permutation of the questions) 
the pair (a ! lr a 2 ) is a valid pair of answers to (ql, q 2 ). (Answers to the "r" questions are ignored.) 

It is clear that co(G[) = 1 co{G%) = 1. Furthermore, using that G[ is a projection game Theorem 7 

from HKV11I shows that there is an appropriate choice of the parameters K,K' = poly(^ _1 , (e') -1 ) sucn 
that if 00* (G2) > S then co*(G[) > 1 — e'. (Theorem 7 from HKV11I as stated applies to two-player games. 
However, since here the referee only plays with two players anyways it is not hard to verify that the theorem 
extends to the present setting. In particular, the reduction performed in HKVlll is oblivious to the choice of 
entangled state.) □ 

4.4 Hardness for three-player XOR games 

Hastad lHasOU Theorem 5.5] showed that for any e > it is NP-hard to approximate the classical value of a 
3-player XOR game within a multiplicative factor 2 — e. Starting from Corollary |4.2| and adapting Hastad's 
proof to the case of entangled players we arrive at the following, which is a restatement of Theorem [T] 
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Corollary 4.4. Lett, 5 > be arbitrary constants. Then the following is NP -hard. Given a 3-player XOR 
game G, distinguish between co(G) > 1 — £ and co*(G) < (1 + 5)/2. 

Proof. The proof follows the analysis of the test L|(w) in HHasOU Lemma 5.2], but we need to slightly 
modify the test to account for the fact that we do not know that direct parallel repetition of projection 
games works in the case of entangled players, so we need to accommodate the use of "confuse" questions 
in IIKV11I . The proof, however, still follows closely Hastad's proof, to which we refer for more details than 
given here. 

We first introduce some notation. Let <p be a 3-SAT formula and Gi = Gq> be the 3-player binaiy game 
associated to q> as the game G2 in the proof of Corollary 14.21 Let X = {x\, . . . , x n } be the set of all possible 
questions in G. We think of the answers as taking values in {±1}, where here —1 corresponds to "true", i.e. 
a value of 1, and 1 to "false", i.e. 0. For every triple of questions (x,y,z), let ip x ,y,z '■ {il} 3 ~~ > {il} De 
the function determining whether the referee accepts or rej ects any given answer triple to those questions. 

For any subset U C X, let T u = {/ : {±1} U -> {±1}}- For every pair of functions /, — / G J-'u 
we select a unique representative and let Rjj C Fu be the resulting set0 For a C {±1} U , let Xa '■ Fu ~^ 
{±1} be denned by Xa{f) = TLxetx f( x )- F° r anv set °f operators {Af} f<=F u and a define 

A K := E fe jr u x*(f)A f/ so that A f = £ X*(f)A*- ( 9 ) 

a 

Let K, K' be parameters to be chosen later. Consider the following 3-player XOR game G2. 

1. The referee independently samples K + K' triples of questions (xjt,yjt,Zfc) as in game G\. For 1 < 
k < K let Wk G {xu,yk,Zk} be chosen unifoimly at random. For K + 1 < k < K + K' let G X 
be chosen according to the single-player marginal in G. Let U = {iv^, 1 < k < K + K'} and 
W = {x k ,y k ,z k , 1 < k < K + K'}. Note that the sets U and W are unordered. Let Z = U U W. Let 

^ = ^l<k<K+K'^x k ,y k ,z k G Tw- 

2. The referee chooses a function ]i G Tz by setting ^(y) = 1 with probability 1 — e and f/(y) = — 1 
with probability £, independently for every y G { — 1, 1} Z . He chooses / G J-u, g\ G uniformly 
and sets g 2 = fgifi G T z by defining g 2 (y) = f(y\u)gi{y\w)h l (y) for every y G {±1} Z 

3. The referee chooses a random permutation of the three players and sends —lf e ^ u f to the first player, 
-l(^At^)eR w (gl A l/O to the second, -l( g2 Af)eR z {g2 A ^) to the thirdJH 

4. He receives answers a, b, c G {±1} and accepts if and only if 

abc = (-l/eR u )(-l( gl A^)eR w )(-l(g 2 A^GR z )- 

First we show that if co(G\) — 1 then a>(G2) > 1 — e. Indeed, let x G {±1} X be a perfect strategy for 
the players in G\. Then in G2 the players can answer their queries f',g[,g2 by f'{x\u)< g[{ x \w)> ^i{ x \z) 
respectively. Given ip(x) = 1 since x came from a perfect strategy in G\, g\ = g\ A ip and g2 = gi A xp, 
so the players will be accepted if and only if fgig2( x \z) = V( x \z) = L which happens with probability 
exactly 1 — £ by definition of y. To establish soundness, we first introduce the following game G[. 

1 . The referee chooses U, W as in game G\ . 
11 The role of Rjj is to enable an operation known as "folding over true". 

12 Here the A is computed by interpreting —1 as "true" and 1 as "false". This operation of "folding over ip" is also used in iHasOll 
and is convenient for the analysis. 
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2. The referee chooses two players at random, sends U to the first and W to the second. 

3. Each player returns an assignment to all variables in the set he was asked. The referee checks that the 
assignments are consistent on the variables in U Pi W, and that they satisfy tp. 

The following claim states the soundness property of G' v 

Claim 4.5. For any 8' , e > there exists K, K' (depending only on 8' and e) such that ifcv*(G[) > 8' then 
a;*(Gi) > 1-e. 

Proof. The game G[ is obtained from G\ exactly as G2 is obtained from G[ in the proof of Corollary 14.31 
and the soundness follows from HKVlll Theorem 7] using the same steps as in the analysis done in the proof 
of the corollary. □ 

We are now ready to establish soundness of the game G2. 

Claim 4.6. Suppose that co*(G2) > (1 + 8)/2. Then co*(G[) > Ae8 2 , where G[ is the "parallel repeated" 
game obtained from G\ as above. 

Proof. We follow almost textually the proof of [HasOL Lemma 5.2]. Let , Ajjj, Bw, gl ,Cz, g2 ) be a 
strategy for the players in G2 with success at least (1 + 8) /2, where for every U, W, Z and f,g\,g2, A U j, 
Bvv,g! and Cz,g 2 are observables. 

First fix a choice of U and W and let xp be defined as in the game. For convenience we rename Aj := 
r f A u,r f f, where r f = -l/ gR[r and similarly B g} := r gl B W/ ,. gigl , where r gl = -l( glA f )GRn and C g2 := 
r^ 2 Cz,,- g2g2 , where r g2 = ~^( g2 A-ip)GR z - Conditioned on the referee making these choices, the players' 
success probability in the game is 

Su,w,f ■= E f/glig2 TT p (A f ® B gl (8) C g2 ). 

Expanding the observables as per © and proceeding as in HHasOli Proof of Lemma 5.2] we arrive at the 
following: 

tu,w,f = D 1 " 2£ ) hlTr p( A n u (y) ® K w ( 7 ) ® C 7 ), (10) 

7 

where here the summation ranges over all those 7 G {±1} Z that are such that xp(x) = 1 for every assign- 
ment x G 7, and 71^(7) (resp. Tiwij)) is defined as the set of assignments x G {il} 17 (resp. y G {±1} W ) 
for which there is an odd number of z G 7 whose restriction to U (resp. W) is x (resp. y). 

We define a strategy for the players in G[ . The player who receives the set U measures according to the 
measurement { A\ } a c{±i}u and answers with a random x G a. The player who receives the set W measures 
according to the measurement {B^}^c{±i} w and answers with a random y G B. (The fact that these are 
well-defined POVM follows from (O and Parseval's formula.) 

By definition of At using the folding operation, any assignment y returned by the second player auto- 
matically satisfies ip (see Lemma 2.34 in MHasOll ). So the probability that the players' answers are accepted 
is simply the probability that they are consistent, i.e. x and y agree on the variables in U Pi W. For any 
(cc,B) C {±1} U x {±l} w let 

S{ot,B) := {7 C {±1} Z : 7^(7) = ix A 7r w (7) = B). 

Let r Ri p = rnin 7GS ( a ^) |7|; if S a ^ is empty we let r a ^ = 00. Then we claim that conditioned on having 
obtained a pair (a, B) the probability of the players being consistent is at least r~l. Indeed, let 7 G S(a, B) 
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be such that (7! = r K/ a. For any z G 7 there is at least one pair of answers, (x = 7Vu(z),y = 7Tyv(z)), 
that is consistent, and by definition of a., 6 from 7 there are at most |7| 2 pairs of possible answers (x G 
^11(7) ,)j in total. Hence the overall success of the above-defined strategy for this U, W is at 

least 

E^Tr,(A 2 ®B 2 ®Id). 
Starting from (TT0T > and applying the Cauchy-Schwarz inequality, 

1 /2 2 1 /2 

Su,w,y < ( E (! - 2e ) 2 ''"' ,i Tl > ( A 2 ® B 2 ; ® Id ) ) (£( E Tr p ( Id ® Id ®C 7 ) 

«,j8 7SS(a,j3) 
\ 1 /2 

<(El7- Tr P (^®^Id)) , (11) 



ctfi 



where for the second line we used (1 -2eY < (4ef)- 1/2 for any t > and < e < 1 /2, and we bounded 
the term inside the second square root by 1 by observing that 



E( E Trp(ld®Id®C 7 )j = E /ie ^, //2G ^ w Tr p (ld®Id®C 2 /2 ) = 1, 

a,p ?eS(tt,p) 

where the first equality follows by expanding out the right-hand side in the Fourier basis. Taking the expec- 
tation over U, W and applying Jensen's inequality, from (fTTb we arrive at S < yr/ (4e), where t is the 
success probability of the above-defined strategy in G[. Hence co*(G[) > 4e<5 2 , as claimed. □ 

Let K and K' be as in Claim 14.51 for 5 1 = AeS 2 . The claim together with Claim 14.61 shows that if 
co*(G 2 ) > (1 + <S)/2thena;*(Gi) > 1 - e, as required. □ 



5 The consolidation procedure 

The proof of Theorem 13.11 which states the soundness of the low-degree point- vs-plane test against entan- 
gled players, relies on an induction procedure: the measurement {M s } is constructed, starting from the 
{A^}, by removing the dependence of A x on the m coordinates of x G F m one at a time. As the induction 
proceeds the error (as measured by an expression similar to ©) blows up exponentially. To keep it bounded 
it is necessary to "improve" the quality of the measurements constructed at each step of the induction. The 
main result of this section, stated in Proposition 15.81 shows that this is possible as long as the measurements 
constructed remain mildly consistent with an underlying "robust" structure (which will eventually be ob- 
tained directly from measurements A x passing the low-degree test with high probability). The "robustness" 
of the structure is used to argue that any measurement mildly consistent with it can be improved to one that 
is highly consistent. 

We first define precisely the three properties of a measurement {M#} that we wish to improve. In 
Section [5721 we introduce the notion of a (5, ^)-robust triple, the underlying structure that will enable the 
improvement. In Section 15.31 we show how two of the three properties can be improved. Finally, the main 
result, Proposition 15.81 is proved in Section 15741 
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5.1 Consistency parameters 

The measurements {M s } constructed throughout the induction will not always be complete measurements, 
i.e. they will satisfy < M g < Id and M g < Id, but not necessarily with equality. Whenever these 
conditions hold we call {M$} a sub-measurement. For convenience we restate Definition 12.31 

Definition 5.1. Let S be a finite set, A = {A 8 } gG $ such that < A s < Id for every g, and M = {M g } gG s 
a sub-measurement. For any S,j,rj > 0, we say that M is 

• 5-consistent with A if£ g (ld -A^M^y < $, 

• ^-projective if(M,ld — M)y < 7, where M := M 8 , 

• rj-complete ifTr p (M) = (M,Id) T > (1 - tj). 

If M satisfies the first item with A = M we also say that M is 5-self-consistent. 

The first property in the definition, consistency, can be understood as a measure of distance: measure- 
ments that are consistent are "close" in a precise sense (see the discussion following the statement of Theo- 
rem [3j]for more on this). The second property, projectivity, intuitively measures how far an operator M is 
from being self-consistent, or "orthogonal" (if | Y) was the maximally entangled state on two subsystems, 
(M,Id — M)y would be if and only if M is the orthogonal projection on a subspace). The last property, 
completeness, measures how far a measurement is from being complete. Note that complete measurements 
are automatically 0-projective. 

5.2 Robust triples 

In this section we define the notion of (5, /^)-robust triple, and prove some useful properties. 

Definition 5.2. Let G = (V, £) be a graph, S a finite set, Q C {g : V — > S} a set of functions and for 
every v 6 V, A v — {Af,} aG g a measurement with outcomes in S. Given 5 > and < j-i < 1, we say that 
(G, A, Q) is a (3, \i)-robust triple if: 

1. (self-consistency) The measurements A are 5-self-consistent, on average over v E V: 

E^vJ^iAlld-A^ <5, 

2. (small intersection) For any g ^ g' G Q, ¥x v& y (g(v) = < 5, 

3. (stability) For any sub-measurement {RS }gi=g it holds that 

s 

where N{v) is the set of neighbors ofv in G, 

4. (expansion) G has mixing time 0(fi^ 1 ). Precisely, if for any v G V we let Pkip) denote the dis- 
tribution on V that results from starting a k-step random walk at v, then for any 5 > and some 
k = 0(log(l/^) log(l//i)) it holds that E v& v\\pk( v ) ~ u \\i ^ $> where u is the uniform distribu- 
tion on V. 
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We will sometimes make the underlying state |Y) explicit by writing the triple as (G, A, Q)y- 

We note a useful property that follows from the definition. 

Claim 5.3. Suppose (G, A, Q)y is a (5, ]i)-robust triple. Then the measurements A v are almost-projective, 
in the sense that 

E,£<A5- K) 2 ,Id) Y = 0(VS). (12) 

a 

Furthermore, there exists a 6' = 0(^^ 2 log 2 (l/<5) log 2 (l/f/)) such that for any sub-measurement {R c? } ? eg, 

£(RS,AS-(AS) 2 ) Y < 5', 

g 

where AS := E P€V Af W . 

Proof. The first property in the claim follows from the self-consistency condition. Indeed, 
E„£(A$ - (^) 2 ,Id) Y = E,£(A$(Id-^),Id) T 

a a 

= E,£(A«(Id-A$),A>) T 

a,b 

a 

^E v £(ld-A«,A" V )Y 

a 

<5, 

where the third and fourth lines follow from the Cauchy-Schwarz inequality and the self-consistency condi- 
tion. 

To show the second property, first recall from Definition 15 .2 1 that the robustness condition implies the 
stability property 

^eN(v)L{R 8 >(A^ ] -Af^% < 5. (13) 
g 

We first observe that this condition implies that for any k > 1, 

g 

where N (v) is the set of all v' £ V that are at distance at most k from v in G, and the distribution on N (v) 
is the one that results from starting a fc-step random walk at v. Indeed, (fT4l) simply follows from (fT3l and 
successive applications of the triangle inequality. 

The expansion condition in the definition of a (8, ,w)-robust triple implies that for some k — 0(log(l / 6) log(l/^)) 
the distribution on N (v) is ^-close in statistical distance to uniform on V. Applying (fT4l) for this k, we get 

E V/V ,j:(W,(A^-Af >)*) T < {k* + 2)5, 

g 

since for any v, v' , (R#, (A§ — A 8 , ^) 2 ) Y ^ 2. Expanding the square and using (fT2l . we see that 

g g 

which proves the claim. □ 
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5.3 Consistency consolidation 

In this section we prove the following lemma, which establishes consolidation for the consistency and pro- 
jectivity properties (see Definition 15 .11 1. Intuitively, the lemma shows that if a sub-measurement Q is mildly 
consistent with a family of measurements {A v } that underlie a robust triple, then Q can be modified into a 
sub-measurement S that is highly consistent with A and projective. 

Lemma 5.4. Let 5,tj > be such that S < t] < 1/2, }i > 0, and |Y) a permutation-invariant state 
over r > 3 registers. Let (G, A,Q)y be a (S,]^)-robust triple and {Q g }geg a sub-measurement that is 
rj-consistent with A. Then there exists a sub-measurement {S%}g e g such that S is rj 1 -consistent with A and 
projective, for some tj 1 = 0(S 1 ^ i log 2 (l/<5) log 2 (l//^)) that is independent of rj. Moreover, S also satisfies 
(S,Id) Y > (QMh-rj-n'. 

The remainder of the section is devoted to the proof of the lemma. For any g G Q, let AS := E ve yAv . 
We first give the following useful claim. 

Claim 5.5. Let r > 2, |Y) an r -register permutation-invariant state and p the reduced density of |Y) (Y| 
on any one register. Suppose that {A"} is a family of measurements that is 5 -self-consistent, i.e. 

E v £(A a v/ ld-A a v )^ = E £<YK®(Id-A£)®Id^- 2 )|Y) < 5. 

a a 

Then the following holds. 

E v Y2H Aa vP 1/2 (Id-A*)p 1/2 ) <25. 

a 

Proof. Let |Y) = Ya V^i\ u i) \ v i) be the Schmidt decomposition, where the |w,-) are orthonormal vectors 
on the first register, and \vj) are on the remaining (r — 1) registers. By definition, p = Yu^-i\ u i){ u i\- By 
self-consistency of A it holds that 



E„£(T|Ag® A£®Id|Y) = E,££VAijA / (M i |Aj|w/)<i'i|^® Id l 1 ';) > l-£ 

a a i,j 

where here the Id acts on all but the first two players. Applying the Cauchy-Schwarz inequality, we get 



E,EEVA;V A ;! (u ''KM > (!-<*) > 1-2*. 

a i,j 

To conclude, observe that the left-hand side is exactly 1 - £ fl Tr(A£p 1/2 (Id -A%)p 1/2 ). □ 



The proof of Lemma 15.41 relies on the use of the following semidefmite program. Recall that p = 
Tr-^r-i) | Y) (Y| is the reduced density of |Y) on either players' subspace, which we may always assume is 
invertible (if not, simply restrict all measurements to the support of p). 

Primal SDP Dual SDP 

co := max£Tr(Ty /2 Ay /2 ) (15) minTr(X) (16) 

s,. v g ,n>o, ! Y><<id. s± v«,x>p" W « 

s V ~ X>0. 
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We make a few preliminary observations about the SDR 

Claim 5.6. Strong duality holds for (1151 ) and (1 16b - Let {T#} be an optimal solution to the primal, X a 
matching dual solution, and Z := p~^' 2 Xp~^' 2 . Then the following hold. 

Lw = Z g Tr{T s p 1/2 ASp 1/2 ) > Ttp(Q) -rj - 0(V$), 

2. T := £.7* = Id, 

3. Vg, TSp l ' 2 Z = TZp 1/2 A8 and Zp 1/2 T$ = ASp 1/2 TS. 

Proof. It is easy to verify that both primal and dual SDPs are strictly feasible, and hence strong duality 
holds. By choosing T% := QS in (031 ) we get 

a; > £>(Qy/ 2 Ay / 2 ) 

-^ETr(p 1/2 QW /2 ) 

g 

= J^Tr (QS AS ® Id) 

g 

g 

>Tr p (Q)- V , 

where the second line uses the Cauchy-Schwarz inequality and Claim [531 the fourth line self-consistency 
of A and the fifth follows from ^-consistency of Q and A. This proves the first item in the claim. 

Let ({T&},X) be an optimal primal-dual solution pair. Clearly, we may without loss of generality 
assume that T = I^gT g = Id, as imposing this can only improve the primal objective function. Finally, the 
last conditions stated in the claim follow from the complementary slackness conditions 

Vg, TSX = T8p 1/2 Agp 1/2 and XT$ = p 1/2 Agp 1/2 T$ , (17) 

the definition of Z and the fact that p is invertible. □ 

Let ({T%}, X) be an optimal primal-dual solution pair to ([T3Tl-(fT6l. and for every g G Q define 

SS := E v Af, {v) TSAl {v) . (18) 
For every g, we have < S# < A$ and S :=J^gS g < Id. We first prove the following about {S g }. 

Claim 5.7. Let (G, A,Q)y be a (5, ji)-robust triple, {S^} as defined in (118I ). and 5' as in Claim [Ol Then 
{S^} is a sub-measurement such that 

1. Tv p (S) =E g Tr p (SS)>co-0(VS), 

2. S is O [5') -consistent with A. 
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Proof. We have 

Tr p (S) = E v Y^Tr(A g v {v) TSA g J v) p 1/2 ldp 1/2 ) 

g 

g 

> CO, 

where the second line follows from Claim 1531 and the third is by definition of to. This proves the first item 
in the claim. To show the second, note that 

£(ss,id-A% «^ J2( T8 > Ag ( ld - A8 ) A8 )Y = otf + Vs), 

g g 

where the first approximate equality uses self-consistency of A and the last equality follows from Claim 1531 

□ 

The condition on consistency of S and A in Lemma [5~4l now follows from the second item in Claim 15771 
provided rf = Cl(S'), and the completeness condition follows from the first item in Claim l577l togefher with 
the first item in Claim 1531 provided rf = Cl(y/S). To complete the proof of the lemma it only remains to 
verify the projectivity condition. Recall that Z = p~ 1/2 Xp~ 1/2 . We have 

(S, Id -S) Y = Tr p (S (Id -S) ® Id® (r - 2) ) 

~^E Tr p( Tg ®( Id - s )®^9 

g 

< £Tr p (rs® (Id -S)<8>Z) 
g 

= Tr p ((Id -S)®Z) 
< Tf p(2) -X> P (S*<g>AS) 

= £Tr(Ty /2 A^p 1/2 ) - E £Tr p (A§ (l7 Wi W $5 A*) 

g g 

g g 
= (<*' + >/*), 

where the second line uses the definition of S and self-consistency of A; the third uses the dual constraint and 
the definition of Z; the fourth item 2 from Claim 1531 the fifth again uses the dual constraint; the sixth uses 
strong duality and the fact that Trp(Z) is real (since Z is Hermitian) for the first term, and the definition of 
S for the second; the seventh uses Claim |531 for the first term and Claim |531 for the second. This establishes 
the projectivity condition on S provided rf = Q,(S' + yf5) 

5.4 Self-consolidation 

The following proposition states our main "consolidation" result. 
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Proposition 5.8 (Self-consolidation). There exists a constant K > such that the following holds. Let 
r > 3, H a symmetric r -player game, X a finite set, and for every x G X, G x = (V x , E x ) a graph, S x a set, 
and G x Q{g:V x -> S x }. 

Suppose that for any < £ < K and strategy (P, | Y) )/or the players that has success 1 — e in the game 
H and is e-self-consistent there exists a collection A x = {A xv } a€ $ of projective measurements defined for 
every v G V x , possibly depending on P but independent of |Y), such that that for all x G X, (G x , A x , Q x )y 
is a (5, ji)-robust triple for some d,]i > such that rf '{5, fi) < 1/4, where rf is as defined in Lemma \5^4\ 

Suppose further that for any e' > there exists rj = t](e) such that r] — > as e' — > 0, and whenever 
(P 1 , is a strategy with success 1 — e' in H, there exists a family of sub-measurements {Q x }g^g that is 
t] -consistent with A' x (obtained from P') and tj -complete, on average over x G X. 

Then for any small enough < £ < K and strategy (P, |Y)) for the players that has success 1 — £ 
in the game H and is e-self-consistent there exists a family of (complete) measurements {R x }g^g that is 
t] c -consistent with A x for some i] c = 0(r(//') 1//4 ), on average over x £ X. 

The significance of the proposition is that the parameter rj c is independent of the parameter tj associated 
with the family {Qf}- It only depends on the robustness parameters (which themselves implicitly 
depend on e). Before proving the proposition we establish two general claims about symmetric r-player 
games. 

Claim 5.9. Let r > 2, H a symmetric r-player game, and {P^} a set of projective measurements for the 
players in H (here q G Q and a G A, respectively the sets of possible questions and answers in the game). 
Then there exists an operator X = X(H, P) such that < X < Id and for any permutation-invariant state 
the success probability p s of the strategy (P, |Y)) in H satisfies 

|p s -<Y|X®Id 0(r - 1) |Y)| < 2(r-l)y/2S, 
where 5 is the self-consistency parameter 

S = E q £(Y|P ? a (ld-P a q ) Id 0(r - 2) |Y), 

a 

and here the expectation is taken according to the marginal distribution of questions on a single player. 

Proof. We do the proof for the case r = 2; the general case is similar. The players' success probability in 
H can be expressed as 

= %<?') E V(a,a'\q r q r )(Y\P^P a q ;\Y), 

(aft') 

where V(a, a' \q, q') G {0, 1} are coefficients representing the referee's decision to accept or reject the pair 
of answers (a, a') to the questions {q,q'). Let 

X := E (m0 £ V(a,a'\q,q')Jp^P: i :Jp^. 

(a,a') 
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Then < X < Id. Let Y := E M) L (fl y) V(a,a'\q,q') Jpjj ® P a . ' Jpjj. We have 



|p s -(Y|Y|Y)| = E M) £ V(a,a'\q,q')(W\(^®P}ld)(^®ld-ld®^)\Y) 

(a,a') 

< ( e ( 9 y)E( y i p ;^<! y )) 1/2 

a,a' 

I / / / / X 1 / 2 

E Mo B Y I ( v p ? ® Id " Id ® v p ^ ( Id ® p ?' ) ( v p ? ® Id " Id ® v p ^ |Y) ) 

/ / / X 1 / 2 

< (2-2E,^(Y|JP«(8) Ji^|T)J 

a 

< ^/2S, 

where the second line follows from the Cauchy-Schwarz inequality and V (a, a'\q,q') < 1 and the last uses 
the definition of 5 and \Jp\ > P^ since < P^ < Id for every q, a. A similar sequence of inequalities 
results in the bound 

|(Y|Y|Y) - (Y|X®Id|Y)| < Vld, 

and combining the two proves the lemma for r = 2. For general r the proof is the same but the operators 
corresponding to players 2, . . . , r need to be brought to the first register one at a time, so that the error is 
(r — 1) times what it is for r = 2. □ 

Claim 5.10. Let e > 0, r > 2, < R < Id be such that (R,Id) T > 1/2, 5 := (R,Id-R) Y , and 
|<J>) := (Id-R)® r |Y)/z, where z = || (Id -R) 0, "|Y) ||. Then 

||(Id-R) 0, '|Y) - (Id^^^^d-R))^)!! 2 < r 2 5, (19) 

and it holds that 

z 2 > 1 - (R,Id) Y - 3r^S. (20) 

Moreover, there is an e' = 0(r(e 1//4 + ^ 1 ^ 4 ) (Id — R, Id) y 1 ^ 2 ) such that for any symmetric r-player game H 
and projective symmetric strategy (P, | Y) ) for the players that has success 1 — e in H and is e-self-consistent 
the strategy (P, has success at least 1 — e' in H. 

Proof Let |4>) := (Id -R) ''^). We first evaluate 

|||*> - (ld<S>(Id — JR)®^ -1 )) |Y> || 2 = \\R® (Id-R^'-^IY)!! 2 

< (R,Id-R) Y 
= 6. 

Repeating a similar inequality r times and using the triangle inequality shows (fT9l . Let X be the operator 
whose existence is guaranteed by Claim 151)1 Since by assumption the strategy (P, |Y)) is £-self-consistent, 
the claim shows that 

(Y|X ® Id®^ 1 ) |Y) > 1 - e - 2(r - l)V2e. (21) 
Let |Y) = |Y) - |<f>). By (O it holds that 

|| |Y) - ( Id®^ <8>R) |Y) || 2 < r 2 5, (22) 
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so that 

,2 



|||Y)|| 2 < ((R 2 ,Id); /2 + rv^) 2 (23) 
< (R, Id) Y + 2ry/S + r 2 5, (24) 

where we used R 2 < R since R < Id. Using that |Y) is a unit vector, (fT9l ) also implies 



z 2 = |||0)|| 2 

< || ( Id®^ 1 ) (8>(Id — R)) |Y) || 2 + 2rV5 + r 2 S 

< (Y| Id ^ 1 ) ® (Id — R) |Y) + 2rv^ + r 2 <S 

= 1- (KI^Y + Sr 2 ^, (25) 

where for the third line we used (Id-R) 2 < (Id-R) since < R < Id. We may also obtain a bound in 
the other direction as 

z 2 > ||(ld ( , '- 1) ^(Id-R))|Y)|| 2 -2r^ 

> (Y|Id 0(, '- 2) ®(Id-R)® (Id-R)|Y) - 2rVd 

> 1- {R,Id) Y - S -2rV5, 

where here the second line follows from the Cauchy-Schwarz inequality and the third uses the definition of 
8. This proves (|2Qb . Combining (1241 and (|25l > we obtain that 

z~ 2 (l- |||Y)|| 2 ) > 1 -6r 2 ^/(R,Id) Y . (26) 

From (|2TT i we get 

1 - e - 2(r - l)\/2e < (Y|X|Y) 

= (Y|X|Y) + (0|X|0) +25R(Y|X|4>) 

< |||Y)|| 2 + z 2 (0|X|0) 

+ 2| (Y|X(Id -R) (gi (Id -R)®( r - 2 ) ® R(Id -R) |Y) | + 2rVs, 



where for the last inequality we used (|221 . Using the Cauchy-Schwarz inequality and consistency of R, the 
third term above is at most 2\/S. Re-arranging terms we see that 

(<D|X|<&) > z~ 2 (l- |||Y)|| 2 - (e + 2(r-l)v / 2i + 2(r + l)v / ^) / 

which using ([26]> and the assumption on (R,M)y shows (<E>|X|0) > 1 — Cl(r 2 (^£ + v^)((Id — RJd)^ 1 ). 
The same calculation can be done replacing X by the operator Y = Eg Pq ® Pq that represents the 

player's consistency, showing that (P, |<£>)) is 0(r 2 (y / e + \/j)(Id — R, Id^^-self-consistent. We may 
thus apply Claim [5791 to finish the proof. □ 



We end this section with the proof of Proposition |57 

Proof of Proposition \5. 8\ Let e, r, H, P, |Y), X and (G x , A x , Q x ) be as in the statement of the proposition. 
Let K be such that for any e' < K it holds that ?/(£') < 1/4. This is possible since — > as e' — > 0. 
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By assumption, (G x , A x , Q x )^ is a (5, f/)-robust triple, and there is a family of sub-measurements {Qf } 
that is 7/1 -consistent with A x and f/i -complete, where rj\ = 77(e). Given our choice of e, rj\ < 1/2, hence 
we may apply Lemma l5~4l (for every x) to deduce the existence of sub-measurements {Q x } that are (on 
average over x G X) ^-consistent with A x , 772 projective and (rj\ + 772) -complete, where 7/2 = r j'( £ )- 
Among all sub-measurements that are 772-consistent with A x and 7/2 -projective, let {R x } be the one that has 
the smallest completeness parameter. Note that the existence of Q x implies that necessarily (R / Ic1)y > 
1 ~~ (*7i + V2) > 1/2, where as usual R = E xeX Eg • 

If (Id— R, Ic1)y < ?/2 /4 tnen we ^ done. Otherwise, let £2 := e'(e, 7/2, R) — 0(i]\ /8 ), where e' is 
as defined in Claim EE] Let |0) := (Id -R) 0, '|Y), z = |||$)|| and |0) := |<I>)/z. By Claim EEJ 
the strategy (P, |0)) has success 1 — £2 in H. The assumption made in the proposition thus guarantees the 
existence of another family of sub-measurements {Sf } that is 7/3 -consistent with A x and 7/3 -complete for 
some 7/3 = 7/ (£2). Provided R is chosen small enough, using Tj(e') — > as e' — > it holds that 7/3 < 1/4. 
Consider a new family of sub-measurements T x = {T x }, where for every g G Q, 

If := RRfR + (Id-R)Sf(Id-R). 

The {T| } are clearly non-negative, and sum to at most Id since both {R x } and {S x } do. Moreover, 

E* £<7* Id - A| ) T = E* £<RRf R, Id - A? ) Y + E x (Id -R)Sf (Id -R) ® (Id -A*) | Y) 
£ £ £ 

< E x £(Y|R|®Id-A|®R|Y)+3V^ 

g 

+ z 2 E x £(0|SS® (Id-AS)|0) +2|||0) - ((Id- J R)®Id (r_1 ))|T>|| 

g 

< 772 + z 2 7/ 3 + br^Tji, (27) 

where the second line uses projectivity of R for the first term, and the last inequality uses consistency of S 
with A for the second term and (fl"9l ) for the third. Moreover, we can evaluate 

<r,Id) Y = (R 3 / Id)Y + ((Id-R)S(Id-R) / Id)Y 

> (R, Id) Y - 3^772" + z 2 (0|S® Id |0) -2|||4>) - ((Id- J R)®Id (f-1) )|Y)|| 

> (R / Id)Y + z 2 (l- 77 3 ) - 6ry/rji, (28) 

where in the second line we used projectivity of R, and for the last we used (fl9l ) as well as the completeness 
condition on S. Applying Lemma 15741 to the T x , we deduce the existence of a family of sub-measurements 
V x that is 7/2-consistent with A x and projective, and such that 

(V, Id) y > (T, Id) y - {rj2 + z% + 3ry/rji) - 772 
> (R / Id)Y + z 2 (l-27/3)-0(ry77 2 "), 

where the first line uses (|27T ) and the second (l28l ). Comparing with our assumption that among all sub- 
measurements that are 772 -consistent with A and projective R had the smallest completeness parameter, and 
using 773 < 1/4, from (|28T ) we get that z 2 = Oij^frfi). Using the bound z 2 > 1 — (R, M)y — ^\/V2 
which follows from (1201 ) we see that necessarily 1 — (R, M)y = 0{r^ffj2). Finally, to conclude we make 
R into a complete family of measurements by adding Id — R x to an arbitrary term R x , for every x. □ 
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6 Analysis of the low-degree test 



In this section we prove Theorems 13.11 and 13.21 We first prove Theorem 13. ll in Sections loTTl to 16.51 the proof 
of Theorem I3.2l is given in Section [6761 

Fix < e < 1/2, d > 1, m > 2 and r > 3. Let A,C) be a strategy with success 1 — £ 
in the (d, m, r, F) low-degree-test described in Figure Q] The test accepts in two cases. First, the referee 
automatically accepts if the two directions 3/1,1/2 are not independent, which happens with probability at 
most (1 + |F|)/|F| m < 2/|F| < e given the assumption on q = |F| made in the theorem. Second, the 
referee accepts provided the players are consistent. Thus an overall acceptance probability of 1 — e implies 
that the following must hold: 

E pG5 2 (F'») E ^Gp (A a x ,Cp)Y < 2e, (29) 

h,a: a^h(x) 

where (-,-)y is defined in Section [2] (to which we refer for an introduction to the notation used in this 
section), the first expectation is taken over the choice of a uniformly random 2-dimensional affine subspace 
p of F m , and the second over a uniformly random point x G p. 

The proof of Theorem 13. H is by induction on m > 2. For m = 2 there is a unique plane s in F 2 , hence 
the players have a unique "planes" measurement {C g } ge -p d ^2y By setting M g := C% for every g, Eq. (l29l 
implies the conclusion of the theorem, provided C\ is chosen to be at least 2. 

We now assume that Theorem 13. II is true for some dimension (m — 1) > 2 and for every e,d,r,lP 
satisfying the assumptions of the theorem. We will prove the theorem for dimension m (and every e, d, r, F 
satisfying the assumptions). The proof is divided in three steps. In the first step, carried out in Section 16.31 
we show that the induction hypothesis implies the existence of a family of measurements {Qf }, defined 
for every s G 5 m _i(F m ) and with outcomes g G Vd(s) that are consistent with {A" x } (Lemma [6 .8 1 ). In 
Section [6741 we show how the measurements Q s can be combined together in a sequence of measurements 
{Q/\ }, where k > 1 and (st)i<;<jfc are parallel (m — 1) dimensional subspaces, with outcomes hj G 

\ s i) — 

/ 1 (Lemma f6.HI ). Finally, in Section [6751 we show that if k is large enough these measurements can be 
transformed into a single measurement {M ,! } with outcomes h G ^(F'") that satisfies the conclusion of 
Theorem 13. 1 K Claim 16. 1 5b . We begin by stating some useful direct consequences of (1291 ). 

6.1 The lines measurements 

In this section we define a "lines" family of projective measurements {£>J }g G -p d (£), defined for every £ G 
tSi(F m ), and we show that these measurements, together with the "points" and "planes" measurements, A 
and C, that form the players' strategy all enjoy good joint consistency properties. 

Lemma 6.1. There exists a constant d c such that the following holds. Let (d + l)/|F| < e < 1/2 
and suppose that {A x } and {C^} are projective measurements such that d29l ) holds. Then for every line 

I G 5i(F m ) there exists a projective measurement {B s ( }g G p d [e) sucn mat < iff or every x G F m and a G F 
we define 

B*x := ^£eSi(B m ),£3x and C a x := ^ v ^s 2 (W'"),p^x 

g£V d (e)--g(x)=a h<=P d {f>):h{x)=a 

and for £ G 5i(F m ) and g G V d (£), 

Cf := E p& 5 2 ( F m) /P= ^ J^j Cp> 
h:h t =g 
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then the following hold 

max jE x(E ]p" \\ B x ~ ^||y' e *gf<» E W^x ~ A a x \\ Y , EieSiQF") E || B f ~~ Hy} = 0(e dc ), 

(30) 



max 



{E. re F'« X] EfeSiCF" 1 ) X] )y, E pei 5 2 ( F ,„) (Cp/C p )y| = 0(e c ). 

«,6eF g,g'eP d (i) h,h'&V d (p) 

a+b gH m > 

(31) 

We note that although all properties stated in the lemma follow from (|29l >, we could have obtained them 
directly, and with a somewhat better dependence on e, by assuming the existence of a strategy (A, B, C, | Y) ) 
with success 1 — £ in the following slight variant of the low-degree test from Figure [T] Let as usual (d, m, F) 
be input parameters, and perform the following: 

1. Choose a random x G F m and two random directions y\,yi G F w . Accept if the two vectors are not 
linearly independent. Otherwise, let p be the plane (x; 2/1,1/2) and £ the line (x;i/i). 

2. Select two players at random and send them one out of the nine possible pairs of questions (u, v) 6 
{x,£,p} x {x,£,p}, chosen uniformly at random. 

3. Receive g G Vd(u) from the first player and h G Va(v) from the second. Accept if and only if g and 
h are consistent on the intersection of their respective domains. 

Nevertheless, we opt to work with the standard low-degree test as described in Figure Q] which is somewhat 
more concise. We first show the following claim, which establishes the part of the lemma that has to do with 
the measurements A and C only. 

Claim 6.2. Suppose that {A x } and {C p } are projective measurements satisfying ( I29I ). Then the following 
holds: 

E \\ A x - c £IIy = °W*>- w 

a 

Moreover, the families of measurements A and C are both self-consistent: 

E.reF'" Y^(A a x ,A b x )Y = 0(e 1/4 ) / (33) 

a^b 

E pG52 (F»>) E<CJ,CJ')y = 0( £ 1/4 ). (34) 

Proof. We first evaluate 

E*gf»' Y^\\A a x ®Id-Id®C a x \\l = 2 - 2E xeF » £<A fl r , C£)y 

= 2 - 2E 3t E pe52 ( P H). p3;c E (^' C p)y 

//,a: a=h{x) 

<4e, (35) 
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where for the first equality we used the assumption that A and C are projective, for the second the definition 
of C x and the last inequality follows from (|29T ). Thus 

E*eF» E K - C *!Iy = 2 -2E x Y2^ P (KC a x )) 

a a 

= 2-2E x £(A£, A" x )y + 2 E x £ 3? (Tr p ((A^ ® Id) (C« ® Id - Id ® A£)) ) 
<2-2E,£(^^->Y + 2v / 4i 

= 2-2E, £( A fl r/ C£) Y + 2 E x £ 3? (Tr p ( (A£ ® Id) (A£ ® Id - Id ®CJ)) ) 

a a 

+ 2\/ii 
< 4e + 8>/e, 



where for the third and last lines we used the Cauchy-Schwarz inequality and (1351) . and in the fourth line we 
used that the number of players r > 3 and the permutation-invariance of |Y). This proves (|32l >. Consistency 
for A can be verified as 

ExeF'» Yl (Ax, A x )y = E xG p„ E (A£, C^)y + E xeF" E(^*' ^* ~~ ^£)y 

/ 2\ 1/2 / 2\ 1/2 

< 2e + f E xeF ". E II^xIIy ) ( E *eF" W^x ~ Cx\\y) 

a a 

and a similar chain of inequalities proves consistency for C as well. □ 

We turn to the proof of the lemma. 
Proof of Lemma \6J] For every line i G 5i(F m ) andg G Vd{€), define 

B\ := Cf = E p& 5 2 ( F m) /f0 ^ E C p . (36) 



We verify that the B are self-consistent: 



hji':h\ t ^h', t a,b 

= E e E p/p , De E xG( £ (C h p A x ^\c h ;A k ^) Y + 0(e^) 

hM':h\t£h\ t 

= E t E hpl ^E xel £ (CJA^ /C J;A^ W ) y + 0( £ 1/8 ) 
h(x)=h'(x) 

= 0(e 1/s ), (37) 
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where the third line uses (|29l l and the fact that C is projective, the fourth (133b and the Cauchy-Shwarz 
inequality, and the last that two distinct degree-rf polynomials on I intersect in a fraction at most (1 + 
d) I |F| < £ of points given our assumption on q = |F|. Applying Markov's inequality, we deduce from (137T ) 
that for all but a fraction at most 0(e 1//16 ) of lines I, the measurement {B s { } is self-consistent. For these I 
we can apply the orthogonalization lemma from MKV11I . which for convenience is restated as Lemma 1641 
below. The lemma guarantees the existence of a universal constant c p > and a family of projective 
measurements {£>f } such that 

EI|Sf-Bf||Y = °( eCp/16 )- (38) 
g 

For the remaining £ we define {M } arbitrarily (one of them is identity, the others 0). Together with (132k the 
definition of B and the triangle inequality, (l38l l proves (l30l provided d c is chosen small enough. Given that 
self-consistency of A and C have already been proven in Claim 16.21 to conclude the proof of the lemma it 
remains to establish consistency of B, which follows immediately from (|37T >. (l3~8T > and the Cauchy-Schwarz 
inequality. □ 

We also state the following useful consequence of Lemma I6TT1 

Claim 6.3. Under the same assumptions as in Lemma \6A\ for any family of sub-measurements {Tp} gGV d (p)' 
defined for every plane p E tS2(F m ), it holds that 

e PG 5 2 (f«) E ( T ?'( E ^ W -Cf) 2 ) Y = 0(e d <), (39) 



h£V d (p) 



and 



E pe s 2 (F".) E ( T i'{ E ec V B?-C h p ) 2 ) = 0(e^ /2 ). (40) 

h&V d (p) 



Proof. To show ( 1391 , expand the square and use 

E peS 2 (F m ) E ^x^p^Tp, A x ^ Cp) Y ~ £l ; c Ep Gi 5 2 ( F m) E ^xep(TpCp, Ax Cp) Y 

heV d (p) 

where the first and second lines follow from (|3TT > and the third from (|29l . Similar bounds for the other 
terms appearing in the expansion of the square suffice to prove d39l >. To show d40l one proceeds in the same 
way, using the Cauchy-Schwarz inequality and (l30l and then (OTT ) in lieu of d39l to perform the third step 
above. □ 

We end with a statement of the orthogonalization lemma, a slightly simplified version of HKV101 Lemma 23]. 

Lemma 6.4 (Orthogonalization lemma). Let {Ai} be a measurement and |Y) a permutation-invariant state 
such that 

E(AvA)y > 1-e. 
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Then there exists a projective measurement {£>,} such that 

Y\\A-B,\\l = 0(e c p), 



where Cp > is a universal constant. 



6.2 Robust triples 



The proof of the induction step (m — 1) — > m requires successive applications of the "consolidation" 
proposition, Proposition 15.81 For this we will use different "robust triples" (see Definition 15.21 ). which are 
denned in this section. 

Let 1 < k < m, s € 5jt(F m ), G s the complete graph on the vertex set defined by the points in s, and 
Q s = Vd{s). Let % = (G s , {B a z }, Q s ), where the measurements {B" z } are as defined in Lemma loTTI 

Claim 6.5. The triple % is (0(£^ /4 ), 1/2) -robust for all but a fraction at most 0(e rfc/4 ) of s G S k (W m ), 
where d c > is the constant from Lemma \6J] 



Proof. Using (l30l ) and (I3TT) we have 

E sG5 t (F»') E zGs Y (K'ld—Bz)^ ~ £ rf c /2 E sGiSt ( F m)E zes Y (A a z ,ld—Af)y = 0(e dc ). 



flGF flGF 



Applying Markov's inequality, the measurements B are 0{e dc ^) self-consistent for all but a fraction at most 
0(e dc ^) of subspaces s. For any s G S^{V m ) let {Rf } be an arbitrary sub-measurement. We have 



E seSit(F m ) E z,z'es E (-^f' (^1 Z —B S Z , Z ) , 



^ rl 2E se5(c(F „, )E2es £ <l£(Bf«) 2 ) T -2R(E seSk(Fm) Y (RlBl {z) Bf\), (41) 

gG^rf(s) pGS 2 (s),z,z'GpgGV d (s) 

where we used that two uniformly distributed z,z' G s can equivalently (up to an error in statistical distance 
of 0(1/ |F |)) be sampled by first choosing a uniformly random plane p C s and then two uniform points 
z, z' G p. To estimate the second term above, write 

E seS k (F m ) Y (R-s/Bz^B^ 2 ^ ~ £ iW2 E seS^(F"') E (Rf r Af ^A^ z 

pG5 2 (s) /Z/ z'Gp gGP rf (s) pG l S 2 (s) /2 ,z'Gp ggP d (s) 

~£*/2 E sG5 t (F™) Y ( R s,CfCf) Y 
pG5 2 (s) g6P d (s) 

p£S 2 (s),z£pgeV d {s) 



where the first line follows from the Cauchy-Schwarz inequality and (BOt . the second from ( 1391 ) and the last 
uses pojectivity of the {Cp} and 001 ). Together with (|4TT ). we obtain 

E sG5 ,(F m ) E z,' Gs E (Rl,(Bl iz) -Bf ) )X = 0(^ 2 + q -i). 
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Applying Markov's inequality and assuming the constant d\ from Theorem 13 .H is chosen small enough that 
we have thus shown that the measurements B are 0(£ dc,/4 ) -stable for all but a fraction at most 
0(e dc ^) of subspaces s. Finally, the small intersection property required in the definition of a robust triple 
follows from the Schwarz-Zippel lemma, and the expansion property trivially holds for the complete graph 
G s . □ 

We generalize the previous construction to tuples of k parallel subspaces s ; G 5 m _i(F m ). For any 
z G F m and a G F let X" := B a z , and for any k > 2, fc-tuple of aligned points z\, . . . ,z^ G F m and any 
d\, . . . , fljt G F let 

X S) : = E *W («) 

gePi(.t(zi)) 

V!,g(z;)=«/ 

where ^(z;) is the line going through the z ; . Let Vr s .\ be the set of all fc-tuples of aligned points {z\, . . . , Zjt), 
where z\ G s,-, and Gi s \ the complete graph on V. Let C// s .) C {g : Vr Sj \ — > F ,c } be the set of all A:-tuples of 

degree-d (m — l)-variate polynomials (gj), where gj G Vd{si). Finally, let 7( Sj ) = (G( S; ), {xj^j}, £/( Sj )). 

Lemma 6.6. Le? 2 < k < 2d. The triple 7( S; ) (0(£ dc/ ' 4 ) / l/2)-robust for all but a fraction at most 
0(e rf ' 74 ) ofk-tuples (s,) G (<S w _i(F w ))*. 

Proof. We verify the four properties needed of a robust triple. Expansion is clear, since the graph is com- 
plete. The property of small intersection follows from the Schwartz-Zippel lemma. Next we verify self- 
consistency. 

E (s/),(z/)e(s/) E ( X (z;)' X (2) )y = E faM*0e(s,) E E < B f( 2; )' B £( 2; ) )y 

(«i)^(«D g,g l *i,g{zi)=a i ,g l {z i )=a' i 

< E( Si)/ ( Z/ )e( S/ ) E ( B !( 2i )' B * 



£( 2/ )'^(z ; )/Y 



= 0(<*), (43) 

where the last equality follows from (OTT i. It remains to prove stability. For any A:-tuple (s, ), let \J^ S .\ } be an 
arbitrary sub-measurement with outcomes g = (gj) G Qua- We abuse notation and also use g to designate 
the unique polynomial of degree (d + k — 1) defined on the whole of F m that has degree at most d when 
restricted to each s,, and at most (k — 1) when restricted to any line £(z{), where z\ G s,-. Such a polynomial 
can be obtained by interpolation from the g[. (Uniqueness follows since equality on every line t{zi) implies 
equality on F" ! .) For simplicity of notation, we also write R% and omit the expectation over (s,). We have 

E (zi),(z'Je( Si ) E < Rg ' ( X ( ( fi) 2l)) " X< &) i)) )\ 
g 

< e WiW6 wE{RMbS -<g ) )\+2 E(Zi) E E <^4 Zi) ) T 

c? * heP d {l{zi)\htg\t 

<E W ,£<R*,(B? -Bf )\ + 2E, £ (Va(z l -)=^i))<4 ir Bf> T 

< E W , X] (Bf - Bf )\ + 0(d^- 1 ), (44) 
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where for the first inequality we used the definition of X and orthogonality of the B\ to separate out those 
terms for which h = g^ and h ^ g^ (but still /i(z ; ) = g(zj) for every z), and for the last we used the 
Schwartz-Zippel lemma. This last term can then be bounded exactly as the analogue term was bounded 
to establish the stability property in the proof of Claim 16-5 L using (l40l instead of (l39l ). This establishes 
the stability property for the X measurements, on average over the choice of the A:-tuple (s;). Applying 
Markov's inequality proves the lemma (provided the constant d\ from Theorem B.ll is chosen small enough 
thatl^q- 1 < £ Cd/2 ). □ 

The following claim establishes consistency of X with A. 

Claim 6.7. For any k > 1 and (zi,...,Zjt) G (F m ) k the {X^'j} ( a .) e jpit form a projective measurement. 
Moreover, for any 1 < j < k we have 



E 



E E = o(^ /2 )- 



Proof If fc = 1 the claim is immediate by definition of X a z \ and (ED, (ED- If fe > 2, 

e (Zi .) E E <4^ A y^ = E fe> EE E (Bf w ^S,) T 

(«i) fl ^"y fl / fl /g:V!,g(2;)=fl,' 

<E,E 2;£ , ^ <Bf,A«.) T 
= 0(e rfc/2 ). 

Here the inequality follows simply by ignoring the constraint that g(z;) = fl, for all indices but i = j, and 
the last follows from the case k — 1. □ 



6.3 The measurements Q s 

Recall that we set to prove Theorem 13. 11 by induction on m. Our first step is to prove that the induction 
hypothesis can be used to deduce the existence of a family of measurements {Q s } parameterized by (m — 
1) -dimensional subspaces s of F m that are consistent with the measurements {A z } coming from the players' 
strategy. 

Lemma 6.8. There exists a universal constant < eg < d c /400 such that the following holds. Under the 
assumptions ofTheorem \3.1\ for every s G <S m -i(F m ) there exists a measurement {Qf }gep d ( s ) such that 

Fix an s G 5 m _i(F" ! ). We call s-restricted (d,m — 1, F) low-degree test the variant of the low-degree 
test in which the referee chooses (z, 3/1,1/2) uniformly in s, and then proceeds as in the usual test. We claim 
the following. 

Claim 6.9. For a fraction at least 1 — 0(s~ 2 q~ 1 ) of(m — 1) -dimensional subspaces s, the strategy A, C) 
has success at least 1 — 3e in the s-restricted (d, m — 1, W)-low-degree test. 
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Proof. In the (d,m,¥) low-degree test over F m , the referee picks a triple (z, 3/1,3/2) uniformly at random 
in F"\ automatically accepts if (yi/i/2) are not linearly independent, and proceeds if they are; conditioned 
on not accepting immediately the resulting plane p = (z;j/i,y2) is uniformly distributed in ^(F'"). 

Consider now a referee who selects random (z,y\, . . . ,y m -\) in F m , automatically accepts if they are 
not linearly independent, and proceeds with the plane p = (z;yi,y2) if they are. Conditioned on the referee 
not accepting immediately, the subspace s = (z;t/i, . . ■ ,y m -i) is uniformly distributed in tS m _i(F m ), and 
p is uniformly distributed in Si{s). Hence the only difference between the two scenarios is in the probability 
of accepting immediately. In both cases, it follows from MAS 971 Lemma 10] that this probability is upper 
bounded by 2/q (but it is higher in the second scenario). In particular, the players' success probability in 
the second scenario, conditioned on not having accepted immediately, is at least 1 — e — 2/q, so that 

E s [1 - £ S ] > 1 - £ - - 

where e s is the players' success in the s-restricted (d,m — 1,F) -low-degree test. To conclude it suffices to 
perform a variance analysis exactly as in HAS 97 1 Lemma 12]. One then obtains that, for any a > 0, 

Pr(l-e s < (l-oc)(l-e-2/q)) < O{oc- 2 q- x ). 

Choosing oc = e, provided q is large enough with respect to £ _1 the claim is proved. □ 

We turn to the proof of the lemma. 

Proof of Lemma I6T51 Let s G 5 m _i(F m ). If the strategy (|Y),A, C) has success at least 1 — 3e in the 
s-restricted (&,m — 1, F) -low-degree test, by applying the induction hypothesis Theorem 13. 1 1 implies the 
existence of a measurement {Qf } which satisfies 

E XGS £ £ <^Qf> Y < Ci(3e)*. 

ae¥g :g (x)^a 

Using (1301 and the Cauchy-Schwarz inequality we also obtain that {Qf } is ^-consistent with {B a z } for some 
5 — 0(e Cl + e dc ^ 2 ). Define the Q s arbitrarily for the remaining subspaces s. Let S be the set of all s for 
which the triple % defined in Claim 1631 is (0{e dc ^), l/2)-robust. Claim 1631 shows that a fraction at least 
1 — 0(£ dc//4 ) of s (assuming d c < 1) are in S. Using Claim [6791 we thus get 

E s& s£ E (KQl) Y <2£, 

flGF g:g (x)/fl 

provided the constant d\ from Theorem 13 .H is chosen large enough. 

We are in a position to apply Proposition 15.81 with the set X there being S here. The proposition 
shows that, provided £ is small enough, for every s G S there exists an "improved" measurement, such that 
on average over s G S the {Qf} are 0((t]' (e dc ^ 4 , l/2)) 1,/2 )-consistent with the {£>*}, where rf is as in 
Lemma 15/41 For the remaining subspaces s we define {Qf } arbitrarily. Using (fJT) to relate consistency with 
B to consistency with A, the lemma is proved provided Cp is chosen small enough (C( = d c /40 suffices). □ 

As a corollary of Lemma l678l the following claim shows that the measurements { Q s } are self-consistent. 
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Claim 6.10. The measurements {Qs}g<=p d (s) satisfy 



?ePj(s) 



where Cg is as defined in Lemma 
Proof. We can write 

E seS m - 1 QF'») E (Qf/QfV-^ E 8E ^_ l(pB) E» 68 E Tr p (Qf ^Qf'^Af W ) 

= o(^), 

where both lines follow from consistency of Q with A. □ 
6.4 Pasting the Q s 

In this section we combine the k measurements {Qs, }/!ep ri (s,)> 1 ^ ' ^ k obtained from Lemma 16781 for any 
fc-tuples of parallel subspaces s, G tS m _i(F m ) into a single measurement {Q( s \ jfye^fs,-)- Let {xW} s . e F 
be the measurements denned in (l42l for every A:-tuple of aligned points z ; G F m . 

Lemma 6.11. For any k > 1, (m — l)-tuple of linearly independent directions y\, . . . ,y m -\ G F m and 
k-tuple of aligned points z\, . . . ,z\ G F m , letting s, = {zi,y\, . . ■ ,y m -\) there exists afamily of measure- 
ments {Q^jl^e^s,.)) such that 

E <Q(S' X £]> Y = (45) 

hiePi{si),ai<EW 

where Cg is the constant defined in Lemma WM 

We first prove the case k = 1, which follows almost immediately from Lemma 16781 
Claim 6.12. The following holds: 

E se5»_ 1 (F'») E 2es E (Qs' X z)y = °( e ^)- 

Proof. By definition, 

E se5„,_ 1 (F'") E zGs E (Qs/ X z)y = E s,z E (Qs/^z)y + Es < 2 E (Qs' ( B z ~ ^z))y 
h,a:a^h(z) h,a:a^=h(z) h,a:a^h(z) 

9 \ 1/2 

<o( £ c o + ( e zEII^-^z|Iy) 

a 

= O(e c 0, 

where the inequality uses Lemma 16781 to bound the first term and Cauchy-Schwarz for the second, and the 
last follows from (l3Qb and Cg < d c /2. □ 
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We will use the following general "pasting" lemma. 

Lemma 6.13. Let S\, S2 be two disjoint sets and {Q s } and {R !l } measurements with outcomes in Q C {g : 
Si —¥ F} and Ti C {h : S2 — > F} respectively. Suppose that Q and R are each consistent with a family of 
measurements {A^} a£ ^ defined for every v G Si U S2.' 

max{E, eSl £ (Q g >K) Y ,K z>GS2 E (R h ,A a )^<5, 

for some 5 > 0, and that Q is 8-self-consistent. Then there exists a "pasted" measurement {jf }, where 
f = (/i,/2) and f\ : Si — > F, fi : S2 — > F, such that T is consistent with A: 

E„ GSl us 2 E ( Tf ' A v) Y = °( v ^)- 
Proof. For any / = (/i,/^) let := \J Qh Rh Qfi . Then {T?} is a measurement, and 



E, eSlUS2 £ ( t/ ^")y= ic iLc 1 E E (^R f2 ^,< 



f,a:a^f{v) |Sl| + |S2| pe SiUS 2 />: 



< ic 1 l.c 1 E E < ^ Rfl ^fo Fl ' A % + 

Pll t P2| v eS 2 f,a:a^f 2 {v) 



S\Si 




\Si\ 


+ 1 


S2I 



ueS 2 f,a:a^f 2 {v) 



|Si| + |S 2 | 
O(v^), 



S\Si 




N 


+ IS2I 



where the first inequality uses consistency of Q with A, the second uses self-consistency of Q, and the last 
consistency of R with A. □ 

We turn to the proof of Lemma l6.11l 

Proof of Lemma \6Al\ The proof of the lemma is by induction on k. The case k = 1 was proved in 
Claim I6T21 Assume the lemma true for k — 1, and for any (k — l)-tuple (s,) G (5 ;i! _i(F m ))' c_1 of parallel 
subspaces let {Q^u—usfcilg be the resulting family of measurements: it holds that 

E (Q&Ug), = °( £Cf )- (46) 

Moreover, from the case = 1 the measurements {Qf } satisfy 

E S , 2GS E (Qs' X z} Y = O(£ c 0- (4V) 

h,a: ay^h(z) 

Let (sj) G (S m - 1 (F m )) k be a /c-tuple of parallel subspaces. By d46l) . (l47i Claim |6.10l Markov's inequality 
and a union bound we see that for all but a fraction at most 0(e c '^ 2 ) of such tuples, it holds that both 
measurements {Q^ 1 '""'^ } and {Qs t } are 0(£ Cf//2 ) -consistent with the corresponding X measurements, 
and moreover {Qs } is 0(£ c ^ 2 )-self-consistent. We are thus in a position to apply Lemma 16.131 with the 
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set Si being the set of points in S; c and the set S2 the set of points in s\ U • • ■ U S;_i (the measurements A 
being the corresponding X measurements). As a result, the lemma promises the existence of a measurement 
{Q( ,hk \} for which we can write 



'(si,...,Sjfc) 
^ZjSS; 



E (Qg;,U{;j) T (48) 

(hi) K S« 2; )* 



-E z . esi E E (Q(s ; )' ^(z ; ) )y 
3ig( Zi )^(Zi) 

<E Zi6Si E E (QS'^lz'pY + Ez.Gs^fez, E E (Q(s,')' B ?)y 

(/j,.) g£Wz,-)) (fci) ge^(0 

3Kfc-l,g( Zi ) 7^,(2.) g('k)¥=h('k) 

v(«i)\ ,T3 V- V- /r»(*<: 



E z ;GS/ E E (Q( S ,')' x (z!))y + e z,g S , E E (Q( S -)' x z*)y 

(fa f ) (a,-): 3i<k-l,ai^hi(zi) (hi) a^h k (z k ) 

0(e C[/4 ), (49) 



where for the first and third lines we used the definition of X, and for the last we used the consistency 
properties of the Q measurements with the corresponding X promised by Lemma [6. 131 For those A:-tuples 
(sj) for which we could not apply Lemma l6.13l we define {qL'% } arbitrarily, obtaining as a result that (l49l 
holds on average over the choice of a fc-tuple (si). 

To conclude the proof of the lemma we apply Proposition 15.81 with the set X there being the set S 
of fc-tuples of subspaces for which the triple T< Si \ introduced in Claim IqTBI is (0(e dc ^), l/2)-robust. The 
proposition shows that, provided e is small enough, for every (s;) G S there exists an "improved" measure- 
ment Q( Si ) such that on average over (s ; ) 6 S the {Q^\} are 0((?]' (e dc ^, 1 / 2) ) 1//2 ) -consistent with the 

{xW}, where rf is as in Lemma I5T41 For the remaining subspaces (s,) we keep the Q( Si ) as previously 
denned. Using the definition of rf and the fact that eg < d c /40, the lemma is proved. □ 

6.5 The measurements M s 

In this section we take the family of measurements {Q^ } constructed in Lemma |6.1 H and show that they 
can be transformed in a single measurement {M g }ge-p d (w m ) tnat satisfies the conclusion of Theorem 13. II 

Let {Q(f*' '"'s*^ } ^ e ^ e family of measurements obtained in Lemma |6. 1 1 1 for k = d + 1. By inter- 
polation, from any tuple g = (g,-) we may recover a single polynomial g of degree at most 2d defined 
on IF" and such that gi s . = gj for every i = 1, ...,d + 1. This results in a family of measurements 
{jR?^ Srf 1 }}g£V 2 d(F'")' wnere nere we implicitly select one "representative" outcome g G V^ffi™) for 
every tuple (g,) (as different degree-2d polynomials may interpolate the same tuple). The following claim 
shows that we can in fact restrict our attention to interpolating polynomials of degree at most d. 

Claim 6.14. For every (d -|- \)-tuple of aligned subspaces (s ; ) there exists a measurement gEV^V) 
such that 

E (si ) E (S g ( Si yB h ih = 0(e«). 
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Proof. First note that Lemma l6.11l and the definition of the measurements X implies the following: 

e m,m* e ( R u>( id - B Z^ = °( £C *y (so) 

Note that B 1 ], is only defined for h G V&(&), but in general a degree- (2d) polynomial will also have degree 
2d when restricted to a line. Here though the definition of the X measurements shows that g\£ should be 
interpreted as the degree- d polynomial obtained by interpolation from the values (g(zj)). 

Next we argue that the contribution of measurement outcomes corresponding to polynomials of degree 
strictly larger than d must be small. 

%) E ( R ( S ,)'W)^flE (Si)AV32 E E Trp(4o® B *® B *') 

g,deg(g)>d g,deg(g)>d h(er\s i )=g(Hr\s i ) 

h'(£'n Si )=g(e'n Si ) 

= 0(^ /2 ), 

where for the first line we applied (l50l twice, and the second follows from the following argument. If g 
has degree > d, its restriction to all but a fraction at most 0(q^ 1 ) of lines £ also has degree > d (see 
e.g. IIMR081 Lemma 6.4]). Hence the degree-d polynomial recovered by interpolation from (d + 1) values 
of g at random aligned points z, G £ is unlikely to agree with gu (since they have different degrees). Thus 
on the right-hand side of the first line above, the polynomial h (resp. h') will almost certainly disagree with 
g on a random point in £ (resp. £') that is not in Us,-. The point z of intersection of £ and £' is such a 
point, which gives the conclusion using (I3TI ) and (l30l ). The measurements S can thus be defined as R when 
deg(g) < d, and made into a complete measurement by adding all R 8 ^ , for deg(g) > d to a single outcome 
of degree less than d for S (e.g. the g = outcome). Using q < d c /2, the claim is proved. □ 



M g := E (s a .S* (51) 



Let g G P«/(F m ), and define 

where the expectation is taken over all tuples of parallel [tn — 1) -dimensional subspaces s,. Clearly M g > 
for every g. It also holds that M s = Id. Indeed, for any g G Vd(Jc m ) and any tuple (s,), g| s . has degree 
at most d; moreover for any tuple (g, G Vd{si)) there is at most one g G "Pd(F m ) that interpolates all the g, 
(indeed, any two such g should be on each of d + 1 parallel (m — 1) -dimensional subspaces, hence should 
be on all of F'"). We conclude the proof of Theorem I3.1| by showing the following. 

Claim 6.15. Under the assumptions ofTheorem \3.1\ the measurement {M# }ge;p i; (F m ) defined in (1511 ) satisfies 



E* £ (M* AJ> Y = O(^), 

g,a:a^g(x) 



where C\ < 1 a universal constant. 
Proof. We have 



g,a:a^g(x) g,a:a^g(x) 

~e<fc/2 E( s .) /X E (^(s,)'^)y 
g,a:a^g(x) 

= E (s i ),x,£3x E ( S fs ; )' B/A 



0(e 



cr 
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where for the second line we used <|30T > and the last follows from Claim I6TT41 



□ 



6.6 Analysis of the two-level low-degree test 

In this section we prove Theorem 13.21 Let A,B,C) be a strategy for the players with success proba- 
bility at least 1 — e in the (d, m, r, F) two-level low-degree test, as described in Figure |2] The probability 
that the referee accepts in steps 2. or 3. is at most (1 + |F|)/|F| m < 2/|F| < e (given the assumption on 
q = |F| made in the theorem) for each step. Hence the strategy's success probability in steps 4.1 and 4.2 
must be at least 1 — 6e each, which immplies the following: 

^seS 2 (V m )^-xes E (^x'Es,*)y < 6e (52) 
a,b€W,a^=b 

E seS 2 (F'") E *'es' E E ( C s,s" B s,x')y - 6£ ( 53 ) 

The following claim applies the analysis of the low-degree test to measurements B and C, separately for 
eachs G 5 2 (F m )- 

Claim 6.16. For any s G c>2(F m ) there exists a measurement {Mf } with outcomes g G V^i(s) such that 

E 5GS2{wm) E xGs £ (A a x ,Mf) Y = 0(e Cl ) / (54) 

g,a:a^g(x) 

where C\ > is the constant from Theorem \3.1\ 

Proof. Given a plane s G c>2(F m ) let e s be the value of the left-hand-side of (l53l (for that s), so that 
E s [e s ] < 6e. By definition of e s , the strategy (|Y),B S , C s ) has success at least 1 — e s in the (d' ,m ! ,r,¥) 
low-degree test. Choosing the constant di large enough, Markov's inequality implies that a fraction at least 
1 — e of subspaces s are such that £ s satisfies the assumptions of Theorem 13.11 For those s, applying the 
theorem we obtain a measurement {Mf }g G -p ; ,(p«') suc h that 

E, GS £ (Mf / B« X ) Y = 0(#). (55) 

Translating g back to a function on s C F m , we may also thing of g as a bivariate polynomial with degree 
at most dd' . Using concavity of z — > z Cl (since C\ < 1) and the fact that d55l) holds for all but an e fraction 
of s we obtain 

E seS 2 (F»';ues E E (mI> B s,x)y = °{ £Cl )' 

where for those s such that (1551 we defined {Mf } arbitrarily. Finally, using (l52l it is not hard to see that 
this implies the claim. □ 

We turn to the proof of Theorem 13.21 

Proof of Theorem \3?2\ Foreverys G i^fF'") let {.Mf }g£P i (s) be the measurement promised by Claim l6.16l 
The consistency relation (1541 precisely states that the strategy , A, M) has success probability at least 
1 — 0(e Cl ) in the (dd',m / r,F)-low degree test. Provided the constant di is chosen large enough, we may 



46 



apply Theorem 13. II to that strategy to obtain a single measurement {M h } with outcomes h G Vddi(F m ) 
satisfying 

E, GP « E E {M h ,A%\ = 0{A), 

heV dd ,(V"<)a:a^h(x) 

which proves the theorem by choosing C2 = c\ and C2 large enough. □ 

7 Analysis of additional tests 
7.1 The 3-SAT test 

In this section we analyze the protocol for 3-SAT given in Section [3^21 and prove Theorem 13.31 We note that 
the analysis is very standard in the PCP literature, and once the soundness of the low-degree test has been 
established virtually no additional complications are introduced from the consideration of entangled-player 
strategies (except maybe in terms of notational overhead). 

Let cp be a 3-SAT formula on n variables, e > and ( | Y), A, B, C, D, E, F) an r-prover strategy with 
success 1 — £ in the (q>,n,r,W) 3-SAT test described in Figure [3] The following claim summarizes some 
initial consequences of the players' success in the test. For any clause C G (p on variables x,y,z G [n] we 
let S(C) be the set of all degree-4 curves in F m going through the points x, y and z. For any c G S(C), we 
let S(C,c) be the set of degree-4 curves in F m that go through #x,#y,#z, where the coordinate map # is 
determined by c. 

Claim 7.1. Under the assumptions of Theorem \3.3\ there exists a measurement {M s }g G -p dirr ^my where 
d" = 2[log(d + 1)], such that the following hold: 

E roe F»< £ (M g , A a w )^ = 0(e C2 ), (56) 

EcG<pE ceS ( C )E c / GS ( C/C )E a;Gc / E (^c"^?c)y = ( - ) ( e )' ( 57 ) 
where C2 > is the constant from Theorem \3. 21 

Proof. First we observe that the strategy ( | Y), A, B, C) must have success at least 1 — 2e in the (d, m, r, F) 
two-level low-degree test performed in step [2a] Provided dj, is chosen small enough compared to di, Theo- 
rem l3.2l implies the existence of a measurement {M g }, with outcomes in Vm' (F m ), that is 0(e C2 ) -consistent 
with A, proving (l56l ). To show (I57T ). we first note that in step |2(b)iT| the point w' is uniformly distributed in 
c' , hence that test in particular enforces that 

EcG< p E ceS ( C )E c , eS ( C/C )E zt) / G ^ E ( F c,c" D c,#iv')y = °( e )- ( 58 ) 

g,a-a^g(#w r ) 

Similarly, the first check performed as part of step |2(b)i | in the protocol enforces that 

E C£(pE cGS (C) E c'£S(C,c) E w'£c' ( A w'' D c,#w')y = °( £ )- ^ 59 ) 

Eq. (1571) is proved by combining (I58T ) and (l59l ). □ 
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For every polynomial g G Vdd"{^ m ) an d variable x G [n], let Z(g,x) := g(x), where x G F m is 
the point associated to variable x, be the assignment that g implicitly associates to x. Let Z(g) C {0, 1}" 
denote the assignment to all variables implied by g. Let S(<p) C {0, 1}" be the set assignments satisfying 
a fraction at least 1 — C3£ C3 of clauses of cp, where C3, C3 are constants as in the statement of Theorem 13.31 
and defined in the proof of Claim 17^21 below. 

Claim 7.2. Under the assumptions of Theorem \3.3\ it holds that 

£ (MS,Id) T > 1-C 3 e c \ 

g:Z(g)£S(<p) 

Note that the claim implies in particular that provided e is small enough cp has an assignment to its 
variables satisfying a fraction at least 1 — C3£ C3 of clauses, proving Theorem 13.31 provided X3 is chosen 
small enough. 

Proof. Let C = (x,y, z) be a clause, and c = c(w) the degree-4 curve through (x, y, Z, w), where x, y, z G 
F m are the points associated to the variables x, y, z respectively. For (b, d, e) G {0, l} 3 we write (b, d, e) h 
C to indicate that the assignment (x,y,z) := (b,d,e) satisfies the clause C. In step |2(b)il of the protocol 
the referee accepts with probability at least 

1 - 4e < E c=(w)G¥ ,E ceS(c) £ £ (Fj c „Id) Y 

c'eS(C,c) (b,d,e) hC g: g(#x)=b,g(#y)=d, 
g(#z)=e 

< E C=(W)G¥ ,E ces(c) EE E K P (Fic>® Mh )+°{ £C2 )> (60) 

c'eS(C,c) (b,d,e)\-Cg:g(#x)=b,g(#y)=d,h:h(w')=g(#w') 
w'ec' g{#z)=e 

where the second equality follows from (l56l and (l57l . The restriction of h to the curve c is a univariate 
polynomial of degree at most Add" . Using variable substitution it is mapped to a polynomial on F'" of total 
degree also at most Add" , which when restricted to the degree-4 curve d has degree at most 16dd" . This 
polynomial is either equal to the degree-d' polynomial g, or, by the Schwartz-Zippel lemma, intersects it 
in a fraction at most 0(dd" /|F|) of points, which is less than e provided the constant d$ is chosen large 
enough. Hence from (l60l we get 

l-0(£ c *) < E C=(W)G ,E CGS(C) £ £ (f c \f /M % + e 

C 'GS(C, C ) (b,d,e)hCg:g(x)=b,g(y)=d, 
tv'ec' g{z)=e 

E E <M^Id) Y + £ 

c'GS(Cc) (b,d,e)hCg:g(x)=b,g(y)=d, 
tv'ec' g(z)=e 

= E E c=(x,y,z)e v (M^Id) Y + e, (61) 

gePiQF") (g(x),g(y),g(z))hC 

where the last line is obtained by simplifying the expression. Given a polynomial g, let jc(g) denote the 
fraction of clauses satisfied by the assignment to the variables of cp implicitly defined by g. Eq. (f6Tb shows 
that 

£ K (g)(M8,ldh > l-0(e C2 ). 

geV d (F>") 

Since ( {M%, Id) y) is a probability distribution over polynomials g, Markov's inequality implies that all but 
a fraction at most 0(e Cl ^ 2 ) of g chosen according to this distribution are such that jc(g) > 1 - 0(e C2/2 ). 
This proves the claim for an appropriate choice of constants C3 = C2 /2 and C3 large enough. □ 
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7.2 The QUADEQ test 



In this section we sketch the proof of Lemma |331 The analysis of the QUADEQ test as described in Figure [5] 
is rather standard (see e.g. HAB09I Theorem 11.19]). Here the only additional complications introduced by 
the consideration of entangled players appear in the analysis of the linearity test, which was already stated 
in Theorem 13 .4 1 

First we note that the players' success probability of 1 — e implies a success probability of at least 
1 — 16e in each of the four linearity steps performed in step 1.1. of the protocol. Applying Theorem 13.41 
four times, for each of the measurements A\, Ai, B and C there exists a corresponding "linear" measure- 
ment {M^ rl } u€W! „/2, {Af^ 2 }„ G F^ /2 ' {Ml}veF{ and {^c} zG f h2 res P ectrve ly tnat is 0(y/e) -consistent with 
it. Replacing the players' actions in steps 1.2-1.4. in the protocol by the ones induced by these linear 
measurements still results in them being accepted with probability at least 1 — 0{\fe). 

It is not hard to argue (see the proof of Claim l72l for a similar argument) that Step 1.4 in the protocol 
enforces that for a fraction at least 1 — 0(e 1//4 ) of outcomes z of the measurement Mq (under the distribution 
given by ((M^IcI)y)) it holds that 

Pr 2 (E^(E^i?) = X> cW ) ^ !-0( £l/4 )- 

wewf v k v ij J k J 

For any such z, provided e is small enough it is standard analysis to deduce that z defines an assignment to 
the n 2 "variables" XiX; that must satisfy all K equations in cp. 

Finally, step 1.3 in the protocol enforces that a fraction at least 1 — 0(y/e) of outcomes z of Mq are of 
the form z = x <8> X for some xeF". Indeed, any outcome which does not have this form will fail the test 
performed in step 1.3 with constant probability (over the choice of the questions and the outcomes of the 
other two measurements) whenever it is obtained. 

Applying a union bound, we deduce that a fraction at least 1 — 0(e 1,/4 ) of outcomes z of Mq are of the 
form (x, x) for some x defining a satisfying assignment to the variables in (p. Hence 

Z^Mh = 1-0( £ 1/4 ), (62) 

and in particular whenever e is small enough there must exist at least one such assignment, proving the first 
part of the lemma provided K4 is chosen small enough. 

To show the "furthermore" part of the lemma, we use step 1.2. of the protocol. The purpose of the 
test performed in that step is to enforce that the measurement Mb associated to a particular instance cpt 
is consistent with the measurements Ma,i and Ma a obtained from the two chunks l{ and li of variables 
appearing in (p t , where here Maa depends only on the label i{ but not on the instance cp t . Hence the players' 
success 1 — 4e in that test together with (l62l (and the consistency between Mg and Mq enforced in step 1.3) 
implies that 

(Ui,Uj)\-<p t 

This finishes the proof of the lemma provided the constants a, C4 are chosen appropriately. 
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